2 matches found
CVE-2021-41256: Inclusion of Functionality from Untrusted Control Sphere
nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that gets reflected back, unintentionally...
7.1CVSS5.9AI score0.01113EPSS
SaveExploits1References2
PT-2021-23218
Name of the Vulnerable Software and Affected Versions Nextcloud News for Android versions prior to 0.9.9.63 Description The Nextcloud News for Android app has a security issue where a malicious application installed on the same device can send it an arbitrary Intent that gets reflected back,...
7.1CVSS0.01113EPSS
SaveExploits1References7
20