CVE-2019-5449

CVE-2019-5449 is a medium-severity vulnerability affecting Nextcloud Server versions prior to 15.0.1, where a missing check allows for the leakage of calendar event names when confidential or private events are added or modified. The attack vector is network-based with low complexity, requiring low privileges, and results in a partial loss of confidentiality (CVSS 4.3). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.