CVE-2024-46958

CRITICAL

Nextcloud Desktop Client <3.13.4 - Info Disclosure

Title source: llm
STIX 2.1

Description

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.

References (5)

Core 5

Scores

CVSS v3 9.1
EPSS 0.0015
EPSS Percentile 34.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (1)
nextcloud/desktop 3.13.1 - 3.13.4
Published Sep 16, 2024
Tracked Since Feb 18, 2026