Unrated
Missing sanitization in the iOS App 2.24.4 causes an XSS when opening malicious HTML files.
CVE-2019-15614
First seen on SecPulse
References
- advisory nextcloud.com
- report hackerone.com