description: A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.
problem types: Code Injection (CWE-94)
affected:
{
product: Desktop Client
vendor: n/a
versions:
status: affected, version: Fixed in 2.6.5
}