PT-2019-17683 · Nextcloud · Nextcloud Android App
CVE-2019-5454
·
Publicado
2019-07-30
·
Atualizado
2023-02-03
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Nextcloud Android app versions prior to 3.0.0
Description
The issue allows for the destruction of a local cache when a harmful query is executed, requiring the user to reset up the account. This occurs due to SQL Injection in the Nextcloud Android app.
Recommendations
For versions prior to 3.0.0, update to version 3.0.0 or later to resolve the issue.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Nextcloud Android App