CVE-2021-22912

PoC —

CVSS 3.1

6.5 medium

EPSS

1%p70

Published

Jun 11, 2021 (Jun 11, 2021)

Modified

Jun 17, 2026

Description

Nextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only on the local Nextcloud server unless a global search has been explicitly chosen by the user.

Vendors: nextcloud
Products: nextcloud
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.