CVE-2024-46958

EPSS 0.14%
Published 16.09.2024 02:15:01
Last modified 13.03.2025 18:15:44
Source cve@mitre.org
Teams watchlist Login
Open Login

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.

Affected products Warnungen 0 Metrics 3 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Nextcloud ≫ Desktop Version >= 3.13.1 < 3.13.4

Linux ≫ Linux Kernel Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.14%	0.343

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

https://github.com/nextcloud/desktop/compare/v3.13.3...v3.13.4

Patch

https://github.com/nextcloud/desktop/issues/6863

Issue Tracking

https://github.com/nextcloud/desktop/pull/6949

Issue Tracking

https://github.com/nextcloud/desktop/pull/7092

Patch

https://github.com/nextcloud/security-advisories/security/advisories

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-46958

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-46958

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-46958

EUVD