description: Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server to execute remote commands. User interaction is needed for exploitation.
problem types: Resource Injection (CWE-99)
affected:
{
product: Nextcloud Desktop Client
vendor: n/a
versions:
status: affected, version: Fixed in 3.1.3
}