{"id":"CVE-2019-15623","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-15623","generatedAt":"2026-10-29T00:42:59.923Z","title":"Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.","description":"Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.","published":"2020-02-04T20:15:13.000Z","lastModified":"2026-06-17T02:20:46.000Z","status":"Modified","sourceIdentifier":"support@hackerone.com","cvss":{"version":"3.1","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-359"],"affected":["nextcloud/nextcloud server","opensuse/backports sle","suse/package hub"],"epss":{"score":0.01924,"percentile":0.79827,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.92%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html","tags":["Mailing List","Third Party Advisory"],"source":"support@hackerone.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html","tags":["Third Party Advisory"],"source":"support@hackerone.com"},{"url":"https://hackerone.com/reports/508490","tags":["Exploit","Third Party Advisory"],"source":"support@hackerone.com"},{"url":"https://nextcloud.com/security/advisory/?id=NC-SA-2019-016","tags":["Third Party Advisory","Vendor Advisory"],"source":"support@hackerone.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hackerone.com/reports/508490","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://nextcloud.com/security/advisory/?id=NC-SA-2019-016","tags":["Third Party Advisory","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-15623","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}