CVE-2025-66549 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3.16.5, when trying to manually lock a file inside an end-to-end encrypted directory, the p…
Low CVSS: 2.4

CVE-2025-66549

Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3.16.5, when trying to manually lock a file inside an end-to-end encrypted directory, the path of the file was sent to the server unencrypted, making it possible for administrators to see it in log files. This vulnerability is fixed in 3.16.5.
Vendor
Nextcloud
Product
Desktop
CWE
CWE-209
Yayın Tarihi
2025-12-05 18:15:58
Güncelleme
2025-12-09 18:58:22
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-209 Desktop LOW Nextcloud 2025

Referanslar

https://github.com/nextcloud/desktop/commit/36d6c234d42b06a6f2e9de3e413a5c3c625edad6 https://github.com/nextcloud/desktop/pull/8330 https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h9xj-qh76-q3hw https://hackerone.com/reports/3159877