Skip to content
OpenAdvisories
Low · 2.0 CVE-2022-24885 EUVD-2022-29653

Improper Authentication in Nextcloud Android Files

Published Apr 27, 2022 · Updated Apr 22, 2025 · Assigned by GitHub_M

Description

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.1, users can bypass a lock on the Nextcloud app on an Android device by repeatedly reopening the app. Version 3.19.1 contains a fix for the problem. There are currently no known workarounds.

Affected products

VendorProductAffectedFixed
nextcloud security-advisories < 3.19.1 —

References