Lucene search
Fabian BräunleinNC-SA-2021-008HistoryFeb 24, 2021 - 12:00 a.m.
Missing URL validation allowed RCE for the server on the Desktop client (NC-SA-2021-008)
2021-02-2400:00:00
Fabian Bräunlein
nextcloud.com
18
Missing validation of URLs in Nextcloud Desktop Client 3.1.2 and earlier allowed a malicious server to execute code on the client. User interaction was required.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud desktop | lt | 3.1.3 |
Related
openvas
openvas
Fedora: Security Advisory for nextcloud-client (FEDORA-2021-1ffffa0251)
2021-04-25 00:00:00
openSUSE: Security Advisory for nextcloud-desktop (openSUSE-SU-2021:0577-1)
2021-04-21 00:00:00
veracode
veracode
Injection Vulnerability
2021-05-09 16:43:35
prion
prion
Design/Logic Flaw
2021-04-14 13:15:00
nessus
nessus
GLSA-202105-37 : Nextcloud Desktop Client: User-assisted execution of arbitrary code
2022-01-24 00:00:00
openSUSE Security Update : nextcloud-desktop (openSUSE-2021-577)
2021-05-18 00:00:00
debiancve
debiancve
CVE-2021-22879
2021-04-14 13:15:00
suse
suse
Security update for nextcloud-desktop (important)
2021-04-19 00:00:00
cve
cve
CVE-2021-22879
2021-04-14 13:15:00
fedora
fedora
[SECURITY] Fedora 33 Update: nextcloud-client-3.1.3-1.fc33
2021-04-24 18:06:43
osv
osv
CVE-2021-22879
2021-04-14 13:15:13
ubuntucve
ubuntucve
CVE-2021-22879
2021-04-14 00:00:00
hackerone
hackerone
Nextcloud: Nextcloud Desktop Client RCE via malicious URI schemes
2021-01-13 17:29:19
gentoo
gentoo
Nextcloud Desktop Client: User-assisted execution of arbitrary code
2021-05-26 00:00:00
thn
thn
1-Click Hack Found in Popular Desktop Apps — Check If You're Using Them
2021-04-15 11:09:00
Related for NC-SA-2021-008