CVE-2021-41166

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.17.1

Description The issue may lead to sensitive information disclosure, allowing an unauthorized app without the required MANAGE DOCUMENTS permission to view image thumbnails for images it does not have permission to view.

Recommendations For versions prior to 3.17.1, update to version 3.17.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive images until the update is applied.