Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-37885

Опубликовано: 14 июн. 2024
Источник: ubuntu
Приоритет: medium
CVSS3: 3.8

Описание

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the enviroment. It is recommended that the Nextcloud Desktop client is upgraded to 3.12.0.

РелизСтатусПримечание
devel

not-affected

macOS only
esm-apps/focal

not-affected

macOS only
esm-apps/jammy

not-affected

macOS only
esm-apps/noble

not-affected

macOS only
focal

not-affected

macOS only
jammy

not-affected

macOS only
mantic

not-affected

macOS only
noble

not-affected

macOS only
upstream

not-affected

debian: Only affects Nextcloud Desktop Client on macOS

Показывать по

3.8 Low

CVSS3

Связанные уязвимости

CVSS3: 3.8
nvd
больше 1 года назад

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the enviroment. It is recommended that the Nextcloud Desktop client is upgraded to 3.12.0.

CVSS3: 3.8
debian
больше 1 года назад

The Nextcloud Desktop Client is a tool to synchronize files from Nextc ...

3.8 Low

CVSS3