CVE-2021-22879: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 5% chance of exploitation in the next 30 days.

Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server to execute remote commands. User interaction is needed for exploitation.

Affected products

• Fedoraproject Fedora: version 33 only
• Nextcloud Desktop: before 3.1.3 (fixed in 3.1.3)

Published 2021-04-14. Last modified 2026-06-17.