CVE-2023-28999[0]: | Nextcloud is an open-source productivity platform. In Nextcloud | Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until | 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server | administrator can gain full access to an end-to-end encrypted folder. | They can decrypt files, recover the folder structure and add new | files.​ This issue is fixed in Nextcloud Desktop 3.8.0, | Nextcloud Android 3.25.0, and Nextcloud iOS 4.8.0. No known | workarounds are available. https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8875-wxww-3rr8 https://github.com/nextcloud/desktop/pull/5560
Created nextcloud-client tracking bugs for this issue: Affects: epel-all [bug 2185952] Affects: fedora-all [bug 2185951]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.