Lucene search

GoogleOSV:CVE-2023-49790

HistoryDec 22, 2023 - 5:15 p.m.

CVE-2023-49790

2023-12-2217:15:08

Google

osv.dev

nextcloud

ios

files app

access

upgrade

patch

security vulnerability

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

6.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

JSON

The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior to version 4.9.2, the application can be used without providing the 4 digit PIN code. Nextcloud iOS Files app should be upgraded to 4.9.2 to receive the patch. No known workarounds are available.

CPENameOperatorVersion
ioseq2.23.2
ioseq4.0.4
ioseq2.17.2
ioseq2.25.8
ioseq4.8.6
ioseq2.17.7
ioseq2.25.7
ioseq2.23.0
ioseq4.4.3
ioseq2.19.0

Name	Operator	Version
ios	eq	2.23.2
ios	eq	4.0.4
ios	eq	2.17.2
ios	eq	2.25.8
ios	eq	4.8.6
ios	eq	2.17.7
ios	eq	2.25.7
ios	eq	2.23.0
ios	eq	4.4.3
ios	eq	2.19.0

Rows per page:

1-10 of 1261

References

github.com/nextcloud/ios/pull/2665

github.com/nextcloud/security-advisories/security/advisories/GHSA-j8g7-88vv-rggv

hackerone.com/reports/2245437

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

6.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

JSON

Related for OSV:CVE-2023-49790