{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T20:20:10.381","vulnerabilities":[{"cve":{"id":"CVE-2019-5454","sourceIdentifier":"support@hackerone.com","published":"2019-07-30T21:15:11.927","lastModified":"2026-06-17T02:37:43.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache when a harmful query is executed requiring to resetup the account."},{"lang":"es","value":"Una inyección SQL en la aplicación de Android Nextcloud anterior a versión 3.0.0, permite destruir una caché local cuando se ejecuta una consulta maliciosa que requiere restablecer la cuenta."}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"n/a","product":"com.nextcloud.client","versions":[{"version":"3.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.0.0:*:*:*:*:android:*:*","matchCriteriaId":"2EE8D6C1-EACE-4623-9E25-C585B74C03FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.0.1:*:*:*:*:android:*:*","matchCriteriaId":"FB809703-75FF-4648-B6A7-3AA3BB787C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.1.0:-:*:*:*:android:*:*","matchCriteriaId":"753C1154-4EB0-424F-BAA7-954588992523"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.1.0:rc1:*:*:*:android:*:*","matchCriteriaId":"B08BAEC3-1C21-4E5C-AC16-95097C4ACF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.1.0:rc2:*:*:*:android:*:*","matchCriteriaId":"DAEB8359-F3C1-4859-B38D-7FF62F60C285"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.2.0:-:*:*:*:android:*:*","matchCriteriaId":"8E417789-CD6C-42E6-8FF9-86949A4C184D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.2.0:rc1:*:*:*:android:*:*","matchCriteriaId":"193044D8-620C-4D74-BA0D-F305A0BD9114"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.2.0:rc2:*:*:*:android:*:*","matchCriteriaId":"5BAEE15A-5B96-4642-8C57-34038D716640"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.3.0:-:*:*:*:android:*:*","matchCriteriaId":"DD1F5BB1-D0CD-4F2D-BE95-2EEAA10ABF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.3.0:rc1:*:*:*:android:*:*","matchCriteriaId":"F7D0CE63-6C14-443D-B24F-0C3E6C56AA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.3.0:rc2:*:*:*:android:*:*","matchCriteriaId":"C0DE73D1-9015-49A5-9F63-B6F42602FC5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.3.1:*:*:*:*:android:*:*","matchCriteriaId":"BA9756F1-AFE1-45DF-B1D1-26369FCA505F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.0:-:*:*:*:android:*:*","matchCriteriaId":"59A3DDDD-ED6E-4A47-9962-FE230474B153"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.0:rc1:*:*:*:android:*:*","matchCriteriaId":"D277A025-2AD1-4584-8057-9D86BAD8C2C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.0:rc2:*:*:*:android:*:*","matchCriteriaId":"6A68948A-2F19-41DB-B6BD-BA7BF172561D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.0:rc3:*:*:*:android:*:*","matchCriteriaId":"36CC3B98-2DF6-489A-86C3-59C478D233EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.0:rc4:*:*:*:android:*:*","matchCriteriaId":"B6322B5E-EE42-49DB-9F17-E4784B62DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.1:-:*:*:*:android:*:*","matchCriteriaId":"E827C5D6-F1C0-4AAD-9D82-FF3801E87E35"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.1:rc1:*:*:*:android:*:*","matchCriteriaId":"69B38809-8E8F-4474-BB6B-C2BA396CC376"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.1:rc2:*:*:*:android:*:*","matchCriteriaId":"19FC4BAC-8452-4BE9-9C53-1E2BA76B2640"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.1:rc3:*:*:*:android:*:*","matchCriteriaId":"0D6111F2-5210-419A-A78C-6ACD6132642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.1:rc4:*:*:*:android:*:*","matchCriteriaId":"F79E7025-BDB3-4DF8-92AF-2B32FD3B1A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.2:-:*:*:*:android:*:*","matchCriteriaId":"F115B909-A233-48E9-8441-FFE586122912"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.2:rc1:*:*:*:android:*:*","matchCriteriaId":"9C3B73BA-78D4-476C-BBEC-829580AE23CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.2:rc2:*:*:*:android:*:*","matchCriteriaId":"E3EC2AC1-CA72-44FB-A61A-222703446D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.2:rc3:*:*:*:android:*:*","matchCriteriaId":"AE86FF29-4D28-4CF4-9384-45D261D68012"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.2:rc4:*:*:*:android:*:*","matchCriteriaId":"1FFA26FE-1536-43C2-9003-53241BE0CAF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.3:*:*:*:*:android:*:*","matchCriteriaId":"F8FB3034-C318-4C27-B74B-6ABEDCA891B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:-:*:*:*:android:*:*","matchCriteriaId":"B5D71647-A93F-48EA-B682-4E191DDF917F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc1:*:*:*:android:*:*","matchCriteriaId":"F35C3127-50D5-4968-92EE-6BF680155FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc2:*:*:*:android:*:*","matchCriteriaId":"5F148F6F-B9BE-4662-BD9B-0B53ED958FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc3:*:*:*:android:*:*","matchCriteriaId":"A0BA5FCA-E8E0-4C09-AC24-C16E39869714"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc4:*:*:*:android:*:*","matchCriteriaId":"A333A3CF-AA22-4789-B0C1-623DF4599E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc5:*:*:*:android:*:*","matchCriteriaId":"D22F05E6-20F0-47F5-A506-CB2D926BF758"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc6:*:*:*:android:*:*","matchCriteriaId":"CC2A6BFE-704C-4350-A9AE-5B78FACDAAF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc7:*:*:*:android:*:*","matchCriteriaId":"7296E005-09AD-48B7-8ABF-654AD2BAE3C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc8:*:*:*:android:*:*","matchCriteriaId":"FCED0ECB-E041-4345-8E04-4322BE1A67E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc9:*:*:*:android:*:*","matchCriteriaId":"91DA8254-4CD7-4FF2-9215-ECAC5E2867F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.1:*:*:*:*:android:*:*","matchCriteriaId":"BA4DA6F3-8A1E-4AF1-B5E2-0042F3C9970D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:3.0.0:rc1:*:*:*:android:*:*","matchCriteriaId":"36647EB1-0A81-4EEA-AA32-2F622681154A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:3.0.0:rc2:*:*:*:android:*:*","matchCriteriaId":"0E77954A-B2F7-4A8C-997F-9798713C856A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud:3.0.0:rc3:*:*:*:android:*:*","matchCriteriaId":"EBE67448-F6A4-4233-B266-95B53071207D"}]}]}],"references":[{"url":"https://hackerone.com/reports/291764","source":"support@hackerone.com","tags":["Patch","Third Party Advisory"]},{"url":"https://hackerone.com/reports/291764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}}]}