description: Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory.
problem types: Path Traversal (CWE-22)
affected:
{
product: Desktop Client
vendor: n/a
versions:
status: affected, version: 2.6.5
}