Unrated
Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the "Reg...
CVE-2021-22895
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-22895 nextcloud-desktop Fixed in: 3.3.1-1
- Ubuntu UBUNTU-CVE-2021-22895 nextcloud-desktop
Original description The description as published by the source.
Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the "Register with a Provider" flow.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory debian.org
- patch github.com
- report hackerone.com