CVE-2022-39210 The Nextcloud Android client is official and internal paths are not protected.

The Nextcloud Android app does not support all the features of the server. For example, the app does not support group or user publishing. Accessing Nextcloud via the Android app requires acceptance of the EULA. The Nextcloud Android app lacks an option to block the installation of apps from outside of the Google Play Store. This may lead to installations of malicious apps. Accessing Nextcloud via the Android app requires acceptance of the EULA. The Nextcloud Android app lacks an option to block the installation of apps from outside of the Google Play Store. This may lead to installations of malicious apps. The Nextcloud Android app does not support all the features of the server. For example, the app does not support group or user publishing. It is recommended that the Nextcloud Android app is upgraded to 3.21.0. There are no known workarounds for this issue. End-users may be able to block the installation of apps from outside of the Google Play Store.

Summary of Severity

The Nextcloud Android app does not support all the features of the server. It is recommended that the Nextcloud Android app be upgraded to 3.21.0. There are no known workarounds for this issue. End-users may be able to block the installation of apps from outside of the Google Play Store. The Nextcloud Android app lacks an option to block the installation of apps from outside of the Google Play Store. This may lead to installations of malicious apps. End-users may be able to block the installation of apps from outside of the Google Play Store.

The Nextcloud Android app does not support all the features of the server, so end-users should upgrade to 3.21.0 before using it on their devices

CVE-2023-39211

The Nextcloud Android app does not support all the features of the server. For example, the app does not support group or user publishing. Accessing Nextcloud via the Android app requires acceptance of the EULA. The Nextcloud Android app lacks an option to block the installation of apps from outside of the Google Play Store. This may lead to installations of malicious apps. Accessing Nextcloud via the Android app requires acceptance of the EULA. The Nextcloud Android app lacks an option to block the installation of apps from outside of the Google Play Store. This may lead to installations of malicious apps.
There are no known workarounds for this issue. End-users may be able to block the installation of apps from outside of the Google Play Store, but this is a complicated process that isn't recommended unless you're familiar with how these permissions work on your device and are willing to take additional steps should they encounter problems in doing so.
End-users should upgrade their devices to a newer version or disable automatic updates for their devices until this issue has been resolved by Canonical or a fix has been released

CVE-2021-39256

How to get help

Feedback for this issue can be submitted via the Nextcloud Android app's website.

How to Outsource SEO Correctly & Avoid the 5 Most Common Mistakes

Nextcloud on Windows

The Nextcloud Windows app does not support all the features of the server. For example, the app does not support group or user publishing. Accessing Nextcloud via the Windows app requires acceptance of the EULA. The Nextcloud Windows app lacks an option to block the installation of apps from outside of the Microsoft Store. This may lead to installations of malicious apps. Accessing Nextcloud via the Windows app requires acceptance of the EULA. The Nextcloud Windows app lacks an option to block the installation of apps from outside of the Microsoft Store. This may lead to installations of malicious apps. End-users may be able to block the installation of apps from outside of the Microsoft Store.

Timeline

Published on: 09/17/2022 00:15:00 UTC
Last modified on: 09/21/2022 15:08:00 UTC