High severity · published Jan 25, 2022
CVE-2021-43863
The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform
7.5
CVSS
1.9%
EPSS
No
On KEV
Description
The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers `FileContentProvider` and `DiskLruImageCacheFileProvider` have security issues (an SQL injection, and an insufficient permission control, respectively) that allow malicious apps in the same device to access Nextcloud's data bypassing the permission control system. Users should upgrade to version 3.18.1 to receive a patch. There are no known workarounds aside from upgrading.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Nextcloud · Nextcloud
before 3.18.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-43863
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-43863
Patch
https://github.com/nextcloud/android/commit/627caba60e69e223b0fc89c4cb18eaa76a95db95
Third Party Advisory
https://github.com/nextcloud/android/security/advisories/GHSA-vjp2-f63v-w479
Permissions Required
https://hackerone.com/reports/1358597
More from Nextcloud
9.8
CVE-2019-5454
SQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache when a harmful query is executed requiring to resetup the account
7.5
CVE-2021-32727
Nextcloud Android Client is the Android client for Nextcloud
6.8
CVE-2023-28647
Nextcloud iOS is an ios application used to interface with the nextcloud home cloud ecosystem
6.8
CVE-2019-5455
Bypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and aborting the process
6.8
CVE-2019-5450
Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML