CVE-2021-22895CWE-295

CVE-2021-22895: vulnerability in Nextcloud Desktop Client

Published · Updated

Follow this CVE+ Monitor Desktop Client+ Monitor nextcloud-desktop

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the "Register with a Provider" flow.
Affected products
n/a · Nextcloud Desktop Client