CVE-2021-22879CWE-99

Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server to execute remote…

published April 14, 2021

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server to execute remote commands. User interaction is needed for exploitation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05036 · 92.2th percentile
Weakness
CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')
Published
2021-04-14T12:41Z
EPSS history
Timeline
  • 14 APR 12:41Z
    Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server to execute remote…
    cvelistv5