cve/2019/CVE-2019-5450.md

### [CVE-2019-5450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5450)
![](https://img.shields.io/static/v1?label=Product&message=com.nextcloud.client&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Script-Related%20HTML%20Tags%20in%20a%20Web%20Page%20(Basic%20XSS)%20(CWE-80)&color=brighgreen)

### Description

Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML.

### POC

#### Reference
- https://hackerone.com/reports/631227
- https://hackerone.com/reports/631227

#### Github
No PoCs found on GitHub currently.
Update Sun May 26 14:27:04 CEST 2024 2024-05-26 14:27:05 +02:00			`### [CVE-2019-5450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5450)`
			`![](https://img.shields.io/static/v1?label=Product&message=com.nextcloud.client&color=blue)`
			`![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)`
			`![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Script-Related%20HTML%20Tags%20in%20a%20Web%20Page%20(Basic%20XSS)%20(CWE-80)&color=brighgreen)`

			`### Description`

			`Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML.`

			`### POC`

			`#### Reference`
			`- https://hackerone.com/reports/631227`
Update CVE sources 2024-06-09 00:33 2024-06-09 00:33:16 +00:00			`- https://hackerone.com/reports/631227`
Update Sun May 26 14:27:04 CEST 2024 2024-05-26 14:27:05 +02:00
			`#### Github`
			`No PoCs found on GitHub currently.`