Lucene search

CVE-2021-43863

🗓️ 25 Jan 2022 16:08:15Reported by GitHub_MType

The Nextcloud Android app prior to 3.18.1 allows malicious apps to bypass permission controls and access data

Reporter	Title	Published	Views	Family All 5
OSV	CVE-2021-43863	25 Jan 202216:15	–	osv
NVD	CVE-2021-43863	25 Jan 202216:15	–	nvd
Prion	Sql injection	25 Jan 202216:15	–	prion
Cvelist	CVE-2021-43863 SQL Injection in FileContentProvider (GHSL-2021-1007)	25 Jan 202215:25	–	cvelist
CNVD	Nextcloud Android app SQL injection vulnerability (CNVD-2022-18415)	27 Jan 202200:00	–	cnvd

Nvd

Vulners

Node

nextcloud nextcloudRange<3.18.1android

[
  {
    "product": "android",
    "vendor": "nextcloud",
    "versions": [
      {
        "status": "affected",
        "version": "< 3.18.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/nextcloud/android/commit/627caba60e69e223b0fc89c4cb18eaa76a95db95
hackerone	www.hackerone.com/reports/1358597
github	www.github.com/nextcloud/android/security/advisories/GHSA-vjp2-f63v-w479

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Jan 2022 16:15Current

7.8High risk

Vulners AI Score7.8

CVSS25

CVSS37.5

EPSS0.001

CWE-89