CVE-2019-15614

Missing sanitization in the iOS App 2.24.4 causes an XSS when opening malicious HTML files.

• CWE-79
• CWE-79

• https://hackerone.com/reports/575562Permissions Required, Third Party Advisory
• https://nextcloud.com/security/advisory/?id=NC-SA-2020-003Vendor Advisory
• https://hackerone.com/reports/575562Permissions Required, Third Party Advisory
• https://nextcloud.com/security/advisory/?id=NC-SA-2020-003Vendor Advisory

Published

Feb 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15609The kill-port-process package version < 2.2.0 is vulnerable …9.8
• CVE-2019-1561Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15610Improper authorization in the Circles app 0.17.7 causes reta…4.3
• CVE-2019-15611Violation of Secure Design Principles in the iOS App 2.23.0 …4.9
• CVE-2019-15612A bug in Nextcloud Server 15.0.2 causes pending 2FA logins t…5.9
• CVE-2019-15613A bug in Nextcloud Server 17.0.1 causes the workflow rules t…8
• CVE-2019-15615A wrong check for the system time in the Android App 3.9.0 c…6.1
• CVE-2019-15616Dangling remote share attempts in Nextcloud 16 allow a DNS p…4.3
• CVE-2019-15617A missing check in Nextcloud Server 17.0.0 allowed an attack…5.4
• CVE-2019-15618Missing escaping of HTML in the Updater of Nextcloud 15.0.5 …4.8
• CVE-2019-15619Improper neutralization of file names, conversation names an…4.8
• CVE-2019-1562Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…