{"affected":[{"affectedData":[{"product":"com.nextcloud.client","vendor":"n/a","versions":[{"status":"affected","version":"3.0.0"}]}],"source":"support@hackerone.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.0.0:*:*:*:*:android:*:*","matchCriteriaId":"2EE8D6C1-EACE-4623-9E25-C585B74C03FD","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.0.1:*:*:*:*:android:*:*","matchCriteriaId":"FB809703-75FF-4648-B6A7-3AA3BB787C52","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.1.0:-:*:*:*:android:*:*","matchCriteriaId":"753C1154-4EB0-424F-BAA7-954588992523","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.1.0:rc1:*:*:*:android:*:*","matchCriteriaId":"B08BAEC3-1C21-4E5C-AC16-95097C4ACF47","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.1.0:rc2:*:*:*:android:*:*","matchCriteriaId":"DAEB8359-F3C1-4859-B38D-7FF62F60C285","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.2.0:-:*:*:*:android:*:*","matchCriteriaId":"8E417789-CD6C-42E6-8FF9-86949A4C184D","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.2.0:rc1:*:*:*:android:*:*","matchCriteriaId":"193044D8-620C-4D74-BA0D-F305A0BD9114","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.2.0:rc2:*:*:*:android:*:*","matchCriteriaId":"5BAEE15A-5B96-4642-8C57-34038D716640","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.3.0:-:*:*:*:android:*:*","matchCriteriaId":"DD1F5BB1-D0CD-4F2D-BE95-2EEAA10ABF04","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.3.0:rc1:*:*:*:android:*:*","matchCriteriaId":"F7D0CE63-6C14-443D-B24F-0C3E6C56AA30","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.3.0:rc2:*:*:*:android:*:*","matchCriteriaId":"C0DE73D1-9015-49A5-9F63-B6F42602FC5F","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.3.1:*:*:*:*:android:*:*","matchCriteriaId":"BA9756F1-AFE1-45DF-B1D1-26369FCA505F","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.0:-:*:*:*:android:*:*","matchCriteriaId":"59A3DDDD-ED6E-4A47-9962-FE230474B153","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.0:rc1:*:*:*:android:*:*","matchCriteriaId":"D277A025-2AD1-4584-8057-9D86BAD8C2C8","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.0:rc2:*:*:*:android:*:*","matchCriteriaId":"6A68948A-2F19-41DB-B6BD-BA7BF172561D","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.0:rc3:*:*:*:android:*:*","matchCriteriaId":"36CC3B98-2DF6-489A-86C3-59C478D233EF","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.0:rc4:*:*:*:android:*:*","matchCriteriaId":"B6322B5E-EE42-49DB-9F17-E4784B62DF5B","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.1:-:*:*:*:android:*:*","matchCriteriaId":"E827C5D6-F1C0-4AAD-9D82-FF3801E87E35","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.1:rc1:*:*:*:android:*:*","matchCriteriaId":"69B38809-8E8F-4474-BB6B-C2BA396CC376","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.1:rc2:*:*:*:android:*:*","matchCriteriaId":"19FC4BAC-8452-4BE9-9C53-1E2BA76B2640","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.1:rc3:*:*:*:android:*:*","matchCriteriaId":"0D6111F2-5210-419A-A78C-6ACD6132642F","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.1:rc4:*:*:*:android:*:*","matchCriteriaId":"F79E7025-BDB3-4DF8-92AF-2B32FD3B1A85","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.2:-:*:*:*:android:*:*","matchCriteriaId":"F115B909-A233-48E9-8441-FFE586122912","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.2:rc1:*:*:*:android:*:*","matchCriteriaId":"9C3B73BA-78D4-476C-BBEC-829580AE23CC","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.2:rc2:*:*:*:android:*:*","matchCriteriaId":"E3EC2AC1-CA72-44FB-A61A-222703446D16","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.2:rc3:*:*:*:android:*:*","matchCriteriaId":"AE86FF29-4D28-4CF4-9384-45D261D68012","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.2:rc4:*:*:*:android:*:*","matchCriteriaId":"1FFA26FE-1536-43C2-9003-53241BE0CAF1","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:1.4.3:*:*:*:*:android:*:*","matchCriteriaId":"F8FB3034-C318-4C27-B74B-6ABEDCA891B2","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:-:*:*:*:android:*:*","matchCriteriaId":"B5D71647-A93F-48EA-B682-4E191DDF917F","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc1:*:*:*:android:*:*","matchCriteriaId":"F35C3127-50D5-4968-92EE-6BF680155FCF","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc2:*:*:*:android:*:*","matchCriteriaId":"5F148F6F-B9BE-4662-BD9B-0B53ED958FD9","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc3:*:*:*:android:*:*","matchCriteriaId":"A0BA5FCA-E8E0-4C09-AC24-C16E39869714","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc4:*:*:*:android:*:*","matchCriteriaId":"A333A3CF-AA22-4789-B0C1-623DF4599E0F","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc5:*:*:*:android:*:*","matchCriteriaId":"D22F05E6-20F0-47F5-A506-CB2D926BF758","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc6:*:*:*:android:*:*","matchCriteriaId":"CC2A6BFE-704C-4350-A9AE-5B78FACDAAF7","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc7:*:*:*:android:*:*","matchCriteriaId":"7296E005-09AD-48B7-8ABF-654AD2BAE3C2","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc8:*:*:*:android:*:*","matchCriteriaId":"FCED0ECB-E041-4345-8E04-4322BE1A67E3","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.0:rc9:*:*:*:android:*:*","matchCriteriaId":"91DA8254-4CD7-4FF2-9215-ECAC5E2867F0","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:2.0.1:*:*:*:*:android:*:*","matchCriteriaId":"BA4DA6F3-8A1E-4AF1-B5E2-0042F3C9970D","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:3.0.0:rc1:*:*:*:android:*:*","matchCriteriaId":"36647EB1-0A81-4EEA-AA32-2F622681154A","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:3.0.0:rc2:*:*:*:android:*:*","matchCriteriaId":"0E77954A-B2F7-4A8C-997F-9798713C856A","vulnerable":true},{"criteria":"cpe:2.3:a:nextcloud:nextcloud:3.0.0:rc3:*:*:*:android:*:*","matchCriteriaId":"EBE67448-F6A4-4233-B266-95B53071207D","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"SQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache when a harmful query is executed requiring to resetup the account."},{"lang":"es","value":"Una inyección SQL en la aplicación de Android Nextcloud anterior a versión 3.0.0, permite destruir una caché local cuando se ejecuta una consulta maliciosa que requiere restablecer la cuenta."}],"id":"CVE-2019-5454","lastModified":"2026-06-17T02:37:43.057","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-07-30T21:15:11.927","references":[{"source":"support@hackerone.com","tags":["Patch","Third Party Advisory"],"url":"https://hackerone.com/reports/291764"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://hackerone.com/reports/291764"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"support@hackerone.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-89"}],"source":"nvd@nist.gov","type":"Primary"}]}