PT-2019-17684 · Nextcloud · Nextcloud Android App

Name of the Vulnerable Software and Affected Versions: Nextcloud Android app version 3.6.0 Description: The issue allows bypassing lock protection when creating a multi-account and aborting the process in the Nextcloud Android app. Recommendations: For Nextcloud Android app version 3.6.0, update ...

PT-2019-17681

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.6.2 Description The issue allows bypassing lock protection, resulting in the leaking of thumbnails when requesting the Android content provider, even when the lock protection was not solved...

PT-2019-17683 · Nextcloud · Nextcloud Android App

Name of the Vulnerable Software and Affected Versions: Nextcloud Android app versions prior to 3.0.0 Description: The issue allows for the destruction of a local cache when a harmful query is executed, requiring the user to reset up the account. This occurs due to SQL Injection in the Nextcloud...

PT-2019-17682

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.3.0 Description The issue allows bypassing lock protection, enabling access to files when prompted for lock protection and switching to the Nextcloud file provider. Recommendations For versions prior t...

CVE-2019-5450: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML...

PT-2019-17679

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.7.0 Description The issue concerns improper sanitization of HTML in directory names. This allows styling of the directory name in the header bar when using basic HTML. Recommendations For versions prio...

CVE-2019-5451: Authentication Bypass Using an Alternate Path or Channel

Bypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the files when repeatedly opening and closing the app in a very short time...

CVE-2019-5453: Authentication Bypass Using an Alternate Path or Channel

Bypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to files when being prompted for the lock protection and switching to the Nextcloud file provider...

CVE-2019-5455: Authentication Bypass Using an Alternate Path or Channel

Bypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and aborting the process...

CVE-2019-5454: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache when a harmful query is executed requiring to resetup the account...

CVE-2019-5452: Improper Access Control

Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved...

PT-2019-17680

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.6.1 Description The issue allows bypassing lock protection by repeatedly opening and closing the app in a short time, enabling access to files. Recommendations For versions prior to 3.6.1, update to...