Description
lib/Controller/ExtractionController.php in the Extract add-on before 1.2.0 for Nextcloud allows Remote Code Execution via shell metacharacters in a RAR filename via ajax/extractRar.php (nameOfFile and directory parameters).
Critical · 9.0
CVE-2019-12739
EUVD-2019-4328GHSA-vpwh-6v3v-q9vw
lib/Controller/ExtractionController.php in the Extract add-on before 1.2.0 for Nextcloud allows Remote Code Execution via shell metacharact…
Published Jun 5, 2019 · Updated Aug 4, 2024 · Assigned by mitre