Vulnerabilities (CVE)

Filtered by vendor Nextcloud Subscribe
Filtered by product Extract
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-12739 1 Nextcloud 1 Extract 2024-11-21 6.5 MEDIUM 9.0 CRITICAL
lib/Controller/ExtractionController.php in the Extract add-on before 1.2.0 for Nextcloud allows Remote Code Execution via shell metacharacters in a RAR filename via ajax/extractRar.php (nameOfFile and directory parameters).