Synchronized Files Vulnerability

CVE-2024-46958

What is CVE-2024-46958?

A critical flaw was identified in the Nextcloud Desktop Client versions 3.13.1 through 3.13.3 on Linux systems, which resulted in synchronized files potentially becoming world writable or world readable. This unintended permission change could lead to unauthorized access to sensitive data. Users utilizing affected versions are encouraged to update to 3.13.4, which addresses these vulnerabilities and restores proper file permission settings, thereby enhancing the security of file synchronization processes.

References