Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-47792

Опубликовано: 16 мая 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5

Описание

Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty applications already installed on a user machine can create link shares for almost all data via the socket API. These shares can then be easily sent off to an external service. Nextcloud Desktop fixes the issue in version 3.15. No known workarounds are available.

РелизСтатусПримечание
devel

not-affected

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

focal

ignored

end of standard support, was needs-triage
jammy

needs-triage

noble

needs-triage

oracular

ignored

end of life, was needs-triage
plucky

not-affected

3.16.0-1
questing

not-affected

Показывать по

EPSS

Процентиль: 1%
0.00012
Низкий

5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5
nvd
9 месяцев назад

Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty applications already installed on a user machine can create link shares for almost all data via the socket API. These shares can then be easily sent off to an external service. Nextcloud Desktop fixes the issue in version 3.15. No known workarounds are available.

CVSS3: 5
debian
9 месяцев назад

Nextcloud Desktop is the desktop sync client for Nextcloud. In version ...

EPSS

Процентиль: 1%
0.00012
Низкий

5 Medium

CVSS3