In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.
References
| Link | Resource |
|---|---|
| https://github.com/nextcloud/desktop/compare/v3.13.3...v3.13.4 | Patch |
| https://github.com/nextcloud/desktop/issues/6863 | Issue Tracking |
| https://github.com/nextcloud/desktop/pull/6949 | Issue Tracking |
| https://github.com/nextcloud/desktop/pull/7092 | Patch |
| https://github.com/nextcloud/security-advisories/security/advisories | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
20 Sep 2024, 22:41
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:a:nextcloud:desktop:*:*:*:*:*:*:*:* |
|
| First Time |
Nextcloud desktop
Linux linux Kernel Linux Nextcloud |
|
| References | () https://github.com/nextcloud/desktop/compare/v3.13.3...v3.13.4 - Patch | |
| References | () https://github.com/nextcloud/desktop/issues/6863 - Issue Tracking | |
| References | () https://github.com/nextcloud/desktop/pull/6949 - Issue Tracking | |
| References | () https://github.com/nextcloud/desktop/pull/7092 - Patch | |
| References | () https://github.com/nextcloud/security-advisories/security/advisories - Third Party Advisory | |
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
16 Sep 2024, 15:30
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
16 Sep 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-16 02:15
Updated : 2024-09-20 22:41
NVD link : CVE-2024-46958
Mitre link : CVE-2024-46958
CVE.ORG link : CVE-2024-46958
JSON object : View
Products Affected
linux
- linux_kernel
nextcloud
- desktop
CWE