Security Advisory

CVE-2023-23948

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-13 16:30:18

Last updated 2025-03-10 21:13:02

Assigner GitHub_M

State PUBLISHED

Description

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in `FileContentProvider.kt`. This issue can lead to information disclosure. Two databases, `filelist` and `owncloud_database`, are affected. In version 3.0, the `filelist` database was deprecated. However, injections affecting `owncloud_database` remain relevant as of version 3.0.

← Browse all CVEs View on cve.org ↗