Approved changes feed: RSS · Atom

cpe:2.3:a:nextcloud:lookup-server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNextcloud (e5ae4298-6932-564f-a40d-08cebea039a5)
ProductLookup Server (2637a7c2-d15e-530e-ba36-2d4b429e4e07)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/nextcloud/lookup-server purl2cpe 2026-06-01 10:17:59.209442

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5476 vulnerable 2026-06-03 14:40:30.246487 Details available
An SQL Injection in the Nextcloud Lookup-Server < v0.3.0 (running on https://lookup.nextcloud.com) caused unauthenticated users to be able to execute arbitrary SQL commands.
Published: 2019-08-07T16:23:51.000Z
Updated: 2024-08-04T19:54:53.478Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.