Unrated severityNVD Advisory· Published Jun 23, 2023· Updated Aug 2, 2024
End-to-End encrypted file-drops can be made inaccessible
CVE-2023-35173
Description
Nextcloud End-to-end encryption app provides all the necessary APIs to implement End-to-End encryption on the client side. By providing an invalid meta data file, an attacker can make previously dropped files inaccessible. It is recommended that the Nextcloud End-to-end encryption app is upgraded to version 1.12.4 that contains the fix.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=1.12.3
- nextcloud/security-advisoriesv5Range: >= 1.12.0, < 1.12.4
Patches
Vulnerability mechanics
References
3- github.com/nextcloud/end_to_end_encryption/pull/435mitrex_refsource_MISC
- github.com/nextcloud/security-advisories/security/advisories/GHSA-x7c7-v5r3-mg37mitrex_refsource_CONFIRM
- hackerone.com/reports/1914115mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.