CVE-2022-39210: Access to internal files of the Nextcloud Android app
Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud Android app files are not properly protected. As a result access to internal files of the from within the Nextcloud Android app is possible. This may lead to a leak of sensitive information in some cases. It is recommended that the Nextcloud Android app is upgraded to 3.21.0. There are no known workarounds for this issue.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-39210?
The severity of CVE-2022-39210 is medium with a CVSS score of 5.5.
What is the affected software of CVE-2022-39210?
The affected software of CVE-2022-39210 is Nextcloud Android version up to and excluding 3.21.0.
How can an attacker exploit CVE-2022-39210?
An attacker can exploit CVE-2022-39210 by gaining access to internal files of the Nextcloud Android app from within the app itself.
What is the potential impact of CVE-2022-39210?
The potential impact of CVE-2022-39210 is a leak of sensitive information from the Nextcloud Android app.
Are there any patches or fixes available for CVE-2022-39210?
Yes, there is a fix available for CVE-2022-39210 in the Nextcloud Android app. Please update to the latest version to address this vulnerability.