The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers `FileContentProvider` and `DiskLruImageCacheFileProvider` have security issues (an SQL injection, and an insufficient permission control, respectively) that allow malicious apps in the same device to access Nextcloud's data bypassing the permission control system. Users should upgrade to version 3.18.1 to receive a patch. There are no known workarounds aside from upgrading.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NNextcloud
APPNextcloud< 3.18.1
Powiązane podatności
SQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache when a harmf...
The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platfor...
Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud An...
Nextcloud android is an android app for interfacing with the nextcloud home server ecosystem. In versions from...
Nextcloud iOS is an ios application used to interface with the nextcloud home cloud ecosystem. In versions pri...