Find real vulnerabilities before they ship
In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.
Base Score
9.1
| Base Score | 9.1 |
|---|---|
| Vector String | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| Base Severity | Critical |
| Version | 3.1 |
| Attack Vector (AV) | NETWORK |
