Nextcloud Extract vulnerabilities

1 vulnerability

Known vulnerabilities in Nextcloud Extract, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9CVE-2019-12739nextcloudextract
EPSS score
2.51%
lib/Controller/ExtractionController.php in the Extract add-on before 1.2.0 for Nextcloud allows Remote Code Execution via shell metacharacters in a RAR filename via ajax/extractRar.php (nameOfFile and directory parameters).