CVE-2022-24885
Improper Authentication in Nextcloud Android Files
Summary
Improper Authentication in Nextcloud Android Files
Original description
The description as published by the source.
Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.1, users can bypass a lock on the Nextcloud app on an Android device by repeatedly reopening the app. Version 3.19.1 contains a fix for the problem. There are currently no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
nextcloud
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.19.1"}]}]
References
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- web hackerone.com