CVE-2023-49790
App PIN code can be bypassed in Nextcloud Files iOS
Summary
App PIN code can be bypassed in Nextcloud Files iOS
Original description
The description as published by the source.
The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior to version 4.9.2, the application can be used without providing the 4 digit PIN code. Nextcloud iOS Files app should be upgraded to 4.9.2 to receive the patch. No known workarounds are available.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
nextcloud
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.9.2"}]}]
References
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- web hackerone.com