Approved changes feed: RSS · Atom
cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:*:android:*:*
part: a version: * update: *
| Vendor | Nextcloud (e5ae4298-6932-564f-a40d-08cebea039a5) |
|---|---|
| Product | Nextcloud (558c2af4-b894-543f-898d-e530fd1e91d6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-28646 |
vulnerable | 2026-06-08 06:01:14.627666 |
App lockout in nextcloud Android app can be bypassed via thirdparty apps
MEDIUM (4.4)
Nextcloud android is an android app for interfacing with the nextcloud home server ecosystem. In versions from 3.7.0 and before 3.24.1 an attacker that has access to the unlocked physical device can bypass the Nextcloud Android Pin/passcode protection via a thirdparty app. This allows to see meta information like sharer, sharees and activity of files. It is recommended that the Nextcloud Android app is upgraded to 3.24.1. There are no known workarounds for this vulnerability.
Published: 2023-03-30T18:16:18.917Z
Updated: 2025-02-11T18:56:24.113Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39210 |
vulnerable | 2026-06-08 05:47:18.351050 |
Access to internal files of the Nextcloud Android app
LOW (3.2)
Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud Android app files are not properly protected. As a result access to internal files of the from within the Nextcloud Android app is possible. This may lead to a leak of sensitive information in some cases. It is recommended that the Nextcloud Android app is upgraded to 3.21.0. There are no known workarounds for this issue.
Published: 2022-09-16T23:10:15.000Z
Updated: 2025-04-23T16:58:38.677Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29160 |
vulnerable | 2026-06-08 05:42:47.027241 |
Sensitive files/data exist after deletion of user account in Nextcloud Android
LOW (2.8)
Nextcloud Android is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.0, sensitive tokens, images, and user related details exist after deletion of a user account. This could result in misuse of the former account holder's information. Nextcloud Android version 3.19.0 contains a patch for this issue. There are no known workarounds available.
Published: 2022-05-20T15:55:10.000Z
Updated: 2025-04-22T18:00:43.200Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24886 |
vulnerable | 2026-06-08 05:41:44.828573 |
Exposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.client
LOW (2.2)
Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.19.0, any application with notification permission can access contacts if Nextcloud has access to Contacts without applying for the Contacts permission itself. Version 3.19.0 contains a fix for this issue. There are currently no known workarounds.
Published: 2022-04-27T13:30:14.000Z
Updated: 2025-04-23T18:32:08.584Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24885 |
vulnerable | 2026-06-08 05:41:44.827751 |
Improper Authentication in Nextcloud Android Files
LOW (2)
Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.1, users can bypass a lock on the Nextcloud app on an Android device by repeatedly reopening the app. Version 3.19.1 contains a fix for the problem. There are currently no known workarounds.
Published: 2022-04-27T13:20:11.000Z
Updated: 2025-04-22T18:03:12.870Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43863 |
vulnerable | 2026-06-08 05:36:44.486669 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41166 |
vulnerable | 2026-06-08 05:35:19.884101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32727 |
vulnerable | 2026-06-08 05:32:07.908325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32695 |
vulnerable | 2026-06-08 05:32:07.851276 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32694 |
vulnerable | 2026-06-08 05:32:07.850884 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32658 |
vulnerable | 2026-06-08 05:32:07.783749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22905 |
vulnerable | 2026-06-08 05:30:01.836009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5453 |
vulnerable | 2026-06-08 05:13:59.181124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5452 |
vulnerable | 2026-06-08 05:13:59.179768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5450 |
vulnerable | 2026-06-08 05:13:59.178204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15622 |
vulnerable | 2026-06-08 05:12:57.701722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15615 |
vulnerable | 2026-06-08 05:12:57.693671 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.