description: Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries.
problem types: SQL Injection (CWE-89)
affected:
{
product: Nextcloud Android
vendor: n/a
versions:
status: affected, version: 3.6.0
}