CVE-2022-24886

2022-04-2714:15:09

Google

osv.dev

nextcloud

android

contact access

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

17.2%

JSON

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.19.0, any application with notification permission can access contacts if Nextcloud has access to Contacts without applying for the Contacts permission itself. Version 3.19.0 contains a fix for this issue. There are currently no known workarounds.