CVE-2022-24885 Improper Authentication in Nextcloud Android Files

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.1, users can bypass a lock on the Nextcloud app on an Android device by repeatedly reopening the app. Version 3.19.1 contains a fix for the problem. There are currently no known...

CVE-2022-24885

Summary: CVE-2022-24885 affects the Nextcloud Android app prior to version 3.19.1. The vulnerability lets an attacker bypass the app’s lock by repeatedly reopening the app on an Android device, potentially enabling access when the device is unlocked or unattended. Affected software: Nextcloud And...