Resource Injection Vulnerability in Nextcloud Desktop Client by Nextcloud

CVE-2021-22879

What is CVE-2021-22879?

The Nextcloud Desktop Client versions prior to 3.1.3 are vulnerable to a resource injection attack due to insufficient validation of URLs. This vulnerability allows a malicious server to potentially execute remote commands if user interaction is achieved. Users must be cautious as exploitation of this issue relies on them interacting with the malicious server. It’s crucial for users of the affected versions to update to the latest release to mitigate this security risk.

References