nextcloud-client vulnerabilities (Alpine)

6 vulnerabilities.

• nextcloud-client Alpine Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders CVE-2023-28999 Fix available 6.9 MediumApril 4, 2023
• nextcloud-client Alpine Nextcloud Desktop client misbehaves with E2EE when the server returns empty list of metadata keys CVE-2023-28998 Fix available 6.7 MediumApril 4, 2023
• nextcloud-client Alpine Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files CVE-2023-28997 Fix available 6.7 MediumApril 4, 2023
• nextcloud-client Alpine Self reflected HTML injection in Desktop client CVE-2023-23942 Fix available 5.4 MediumFebruary 6, 2023
• nextcloud-client Alpine Nextcloud Deck Desktop Client is vulnerable to Cross-Site Request Forgery (CSRF) via malicious link CVE-2023-22472 Fix available 5.3 MediumJanuary 9, 2023
• nextcloud-client Alpine Nextcloud Desktop vulnerable to code injection via malicious link CVE-2022-41882 Fix available 6.6 MediumNovember 11, 2022