CVE-2023-49790

The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior to version 4.9.2, the application can be used without providing the 4 digit PIN code. Nextcloud iOS Files app should be upgraded to 4.9.2 to receive the patch. No known workarounds are available.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
GitHub_MCNA
4.3 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
Common Weakness Enumeration
References
https://github.com/nextcloud/ios/pull/2665
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j8g7-88vv-rggv
https://hackerone.com/reports/2245437
https://github.com/nextcloud/ios/pull/2665
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j8g7-88vv-rggv
https://hackerone.com/reports/2245437