Lucene search

PRIOn knowledge basePRION:CVE-2022-39210

HistorySep 17, 2022 - 12:15 a.m.

Design/Logic Flaw

2022-09-1700:15:00

PRIOn knowledge base

www.prio-n.com

nextcloud

android

internal files

vulnerability

sensitive information

upgrade

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

JSON

Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud Android app files are not properly protected. As a result access to internal files of the from within the Nextcloud Android app is possible. This may lead to a leak of sensitive information in some cases. It is recommended that the Nextcloud Android app is upgraded to 3.21.0. There are no known workarounds for this issue.

CPENameOperatorVersion
nextcloudlt3.21.0

CPE	Name	Operator	Version
	nextcloud	lt	3.21.0

References

github.com/nextcloud/android/pull/10544

github.com/nextcloud/security-advisories/security/advisories/GHSA-vw2w-gpcv-v39f