There are 3 open security issues in buster.
3 issues left for the package maintainer to handle:
- CVE-2020-8189:
(needs triaging)
A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
- CVE-2020-8225:
(needs triaging)
A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials.
- CVE-2020-8227:
(needs triaging)
Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory.
You can find information about how to handle these issues in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/n/nextcloud-desktop.png){kind=link}