Not rated

CVE-2021-22879 Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs,…

Description

Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server to execute remote commands. User interaction is needed for exploitation.

Affected products and versions

Product	Affected versions	Fixed in
Nextcloud Desktop Client	Versions not published

The 2 CVEs of Nextcloud Desktop Client →

CVE-2021-22895 Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate… Not rated

Do you use Nextcloud Desktop Client?

Track this CVE Watch Nextcloud Desktop Client Check my SBOMs

www.cveye.io/en/cve/CVE-2021-22879

Timeline

Published April 14, 2021
Last modified August 3, 2024

References

hackerone.com hackerone.com
nextcloud.com nextcloud.com
github.com github.com
FEDORA-2021-1ffffa0251 lists.fedoraproject.org
GLSA-202105-37 security.gentoo.org

Track this CVE

CVE-2021-22879 Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs,…

Description

Affected products and versions

Other CVEs of Nextcloud Desktop Client