Medium severity4.3NVD Advisory· Published Dec 22, 2023· Updated Jun 17, 2026

CVE-2023-49790

Description

The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior to version 4.9.2, the application can be used without providing the 4 digit PIN code. Nextcloud iOS Files app should be upgraded to 4.9.2 to receive the patch. No known workarounds are available.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Nextcloud
cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:*:iphone_os:*:*
Range: <4.9.2
Nextcloud/Nextcloud iOS Files appllm-create
Range: <4.9.2
osv-coords
pkg:bitnami/nextcloud
Range: < 4.9.2
Nextcloud/security-advisoriescpe-rescue
Range: < 4.9.2

Patches

Vulnerability mechanics

References

github.com/nextcloud/ios/pull/2665nvdPatch
github.com/nextcloud/security-advisories/security/advisories/GHSA-j8g7-88vv-rggvnvdVendor Advisory
hackerone.com/reports/2245437nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000