vulnerability

Gentoo Linux: CVE-2021-22879: Nextcloud Desktop Client: User-assisted execution of arbitrary code

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Apr 14, 2021
Added
May 28, 2021
Modified
Aug 13, 2025

Description

Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server to execute remote commands. User interaction is needed for exploitation.

Solution

gentoo-linux-upgrade-net-misc-nextcloud-client
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.