B911Bade858Ce8E6A0F50F8

**Name of the Vulnerable Software and Affected Versions** Nextcloud Desktop client versions prior to 3.6.1 **Description** An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application in the notifications. There are no known workarounds for this issue. **Recommendations** For versions prior to 3.6.1, upgrade the Nextcloud Desktop client to 3.6.1 to resolve the issue. As a temporary workaround, consider restricting the display of notifications in the Desktop Client application until the upgrade is applied.

**Name of the Vulnerable Software and Affected Versions** Nextcloud Desktop client versions prior to 3.6.1 **Description** An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application via user status and information. **Recommendations** For versions prior to 3.6.1, upgrade the Nextcloud Desktop client to 3.6.1. As a temporary workaround, consider restricting user input for status and information to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Nextcloud Desktop client versions prior to 3.6.1 **Description** An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application. There are no known workarounds for this issue. **Recommendations** For versions prior to 3.6.1, upgrade the Nextcloud Desktop client to 3.6.1 to resolve the issue.