CVE-2024-46958

EPSS 0.14%
Veröffentlicht 16.09.2024 02:15:01
Zuletzt bearbeitet 13.03.2025 18:15:44
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Nextcloud ≫ Desktop Version >= 3.13.1 < 3.13.4

Linux ≫ Linux Kernel Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.14%	0.343

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

https://github.com/nextcloud/desktop/compare/v3.13.3...v3.13.4

Patch

https://github.com/nextcloud/desktop/issues/6863

Issue Tracking

https://github.com/nextcloud/desktop/pull/6949

Issue Tracking

https://github.com/nextcloud/desktop/pull/7092

Patch

https://github.com/nextcloud/security-advisories/security/advisories

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-46958

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-46958

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-46958

EUVD