description: Nextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only on the local Nextcloud server unless a global search has been explicitly chosen by the user.
problem types: Information Disclosure (CWE-200)
affected:
{
product: Nextcloud iOS app (it.twsweb.Nextcloud)
vendor: n/a
versions:
status: affected, version: Fixed in 3.4.2
}