CVE-2021-41166

2022-01-2623:15:08

Google

osv.dev

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.0%

JSON

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGE_DOCUMENTS permission may view image thumbnails for images it does not have permission to view. Version 3.17.1 contains a patch. There are no known workarounds.

CPENameOperatorVersion
androideqdev-20181018
androideqrc-1.2.0-01
androideqdev-20181211
androideqrc-3.1.0-01
androideqstable-1.0.1
androideqoc-android-1.6.3-not-to-release
androideqdev-20181218
androideqdev-20181203
androideqdev-20190928
androideqdev-20200112

Name	Operator	Version
android	eq	dev-20181018
android	eq	rc-1.2.0-01
android	eq	dev-20181211
android	eq	rc-3.1.0-01
android	eq	stable-1.0.1
android	eq	oc-android-1.6.3-not-to-release
android	eq	dev-20181218
android	eq	dev-20181203
android	eq	dev-20190928
android	eq	dev-20200112