You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Notification implicit PendingIntent in com.nextcloud.client allows to access contacts
Low
nickvergessen
published
GHSA-5cj3-v98r-2wmqApr 27, 2022
Package
Android
(Nextcloud)
Affected versions
< 3.19.0
Patched versions
3.19.0
Description
Impact
Any application with notification permission can access contacts if Nextcloud has access to Contacts without applying for the Contacts permission itself.
Patches
It is recommended that the Nextcloud Android app is upgraded to 3.19.0 or later.
Impact
Any application with notification permission can access contacts if Nextcloud has access to Contacts without applying for the Contacts permission itself.
Patches
It is recommended that the Nextcloud Android app is upgraded to 3.19.0 or later.
Workarounds
No workaround available
References
For more information
If you have any questions or comments about this advisory: