nextcloud-desktop vulnerabilities (Debian)

20 vulnerabilities.

• nextcloud-desktop Debian Nextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directory CVE-2025-66549 Fix available 2.4 LowDecember 5, 2025
• nextcloud-desktop Debian Nextcloud Desktop 3rdparty applications can create share links via socket API CVE-2025-47792 Fix available 5.0 MediumMay 16, 2025
• nextcloud-desktop Debian Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty CVE-2024-52510 Public exploitFix available 4.2 MediumNovember 15, 2024
• nextcloud-desktop Debian In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the... CVE-2024-46958 Fix available 9.1 CriticalSeptember 16, 2024
• nextcloud-desktop Debian Nextcloud Desktop client does not verify received singed certificate in end-to-end encryption CVE-2023-29000 Fix available 5.4 MediumApril 4, 2023
• nextcloud-desktop Debian Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders CVE-2023-28999 Fix available 6.9 MediumApril 4, 2023
• nextcloud-desktop Debian Nextcloud Desktop client misbehaves with E2EE when the server returns empty list of metadata keys CVE-2023-28998 Fix available 6.7 MediumApril 4, 2023
• nextcloud-desktop Debian Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files CVE-2023-28997 Fix available 6.7 MediumApril 4, 2023
• nextcloud-desktop Debian Self reflected HTML injection in Desktop client CVE-2023-23942 Fix available 5.4 MediumFebruary 6, 2023
• nextcloud-desktop Debian nextcloudcmd incorrectly trusts bad TLS certificates CVE-2022-39334 Fix available 3.9 LowNovember 25, 2022
• nextcloud-desktop Debian Cross-site scripting (XSS) in Nextcloud Desktop Client CVE-2022-39333 Fix available 4.6 MediumNovember 25, 2022
• nextcloud-desktop Debian Cross-site scripting (XSS) in Nextcloud Desktop Client CVE-2022-39332 Fix available 4.6 MediumNovember 25, 2022
• nextcloud-desktop Debian Cross-site Scripting (XSS) in Nexcloud Desktop Client CVE-2022-39331 Fix available 4.6 MediumNovember 25, 2022
• nextcloud-desktop Debian Nextcloud Desktop vulnerable to code injection via malicious link CVE-2022-41882 Fix available 6.6 MediumNovember 11, 2022
• nextcloud-desktop Debian End-to-end encryption device setup did not verify public key CVE-2021-32728 Fix available 6.5 MediumAugust 18, 2021
• nextcloud-desktop Debian nextcloud-desktop - security update CVE-2021-22895 Fix available 5.9 MediumJune 11, 2021
• nextcloud-desktop Debian Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing... CVE-2021-22879 Fix available 8.8 HighApril 14, 2021
• nextcloud-desktop Debian A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away... CVE-2020-8225 Fix available 7.5 HighSeptember 18, 2020
• nextcloud-desktop Debian A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html ... CVE-2020-8189 Fix available 5.4 MediumAugust 21, 2020
• nextcloud-desktop Debian Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a... CVE-2020-8227 Fix available EPSS 25.8% 6.8 MediumAugust 21, 2020