Medium severity5.7NVD Advisory· Published Jun 23, 2023· Updated Jun 17, 2026
CVE-2023-35173
CVE-2023-35173
Description
Nextcloud End-to-end encryption app provides all the necessary APIs to implement End-to-End encryption on the client side. By providing an invalid meta data file, an attacker can make previously dropped files inaccessible. It is recommended that the Nextcloud End-to-end encryption app is upgraded to version 1.12.4 that contains the fix.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:nextcloud:end-to-end_encryption:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nextcloud:end-to-end_encryption:*:*:*:*:*:*:*:*range: >=1.12.0,<1.12.4
- (no CPE)range: >=1.12.4
- Range: >= 1.12.0, < 1.12.4
Patches
Vulnerability mechanics
References
3- github.com/nextcloud/end_to_end_encryption/pull/435nvdPatch
- github.com/nextcloud/security-advisories/security/advisories/GHSA-x7c7-v5r3-mg37nvdVendor Advisory
- hackerone.com/reports/1914115nvdThird Party Advisory
News mentions
0No linked articles in our index yet.