Lucene search
Veracode Vulnerability DatabaseVERACODE:30396HistoryMay 09, 2021 - 4:43 p.m.
Injection Vulnerability
2021-05-0916:43:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.018 Low
EPSS
Percentile
88.1%
Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server to execute remote commands. User interaction is needed for exploitation.
References
Related
openvas
openvas
Fedora: Security Advisory for nextcloud-client (FEDORA-2021-1ffffa0251)
2021-04-25 00:00:00
openSUSE: Security Advisory for nextcloud-desktop (openSUSE-SU-2021:0577-1)
2021-04-21 00:00:00
prion
prion
Design/Logic Flaw
2021-04-14 13:15:00
nvd
nvd
CVE-2021-22879
2021-04-14 13:15:13
fedora
fedora
[SECURITY] Fedora 33 Update: nextcloud-client-3.1.3-1.fc33
2021-04-24 18:06:43
suse
suse
Security update for nextcloud-desktop (important)
2021-04-19 00:00:00
osv
osv
CVE-2021-22879
2021-04-14 13:15:13
cve
cve
CVE-2021-22879
2021-04-14 13:15:13
nessus
nessus
openSUSE Security Update : nextcloud-desktop (openSUSE-2021-577)
2021-05-18 00:00:00
gentoo
gentoo
Nextcloud Desktop Client: User-assisted execution of arbitrary code
2021-05-26 00:00:00
hackerone
hackerone
Nextcloud: Nextcloud Desktop Client RCE via malicious URI schemes
2021-01-13 17:29:19
ubuntucve
ubuntucve
CVE-2021-22879
2021-04-14 00:00:00
nextcloud
nextcloud
debiancve
debiancve
CVE-2021-22879
2021-04-14 13:15:13
cvelist
cvelist
CVE-2021-22879
2021-04-14 12:41:24
thn
thn
1-Click Hack Found in Popular Desktop Apps — Check If You're Using Them
2021-04-15 11:09:00