Security Advisory
CVE-2019-12739
9
CRITICAL
Vulnerability Description
lib/Controller/ExtractionController.php in the Extract add-on before 1.2.0 for Nextcloud allows Remote Code Execution via shell metacharacters in a RAR filename via ajax/extractRar.php (nameOfFile and directory parameters).
Published Date
June 5, 2019
Official Source
NIST NVD Advisory