[Git][security-tracker-team/security-tracker][master] Add CVE-2025-47792/nextcloud-desktop

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1b3ca9e9 by Salvatore Bonaccorso at 2025-05-16T23:05:49+02:00
Add CVE-2025-47792/nextcloud-desktop

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -119,7 +119,11 @@ CVE-2025-47794 (Nextcloud Server is a self hosted personal cloud system. In Next
 CVE-2025-47793 (Nextcloud Server is a self hosted personal cloud system, and the Nextc ...)
 	- nextcloud-server <itp> (bug #941708)
 CVE-2025-47792 (Nextcloud Desktop is the desktop sync client for Nextcloud. In version ...)
-	TODO: check
+	- nextcloud-desktop 3.15.0-1
+	NOTE: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-qm2f-959g-7p65
+	NOTE: https://github.com/nextcloud/desktop/pull/7517
+	NOTE: https://hackerone.com/reports/1995856
+	NOTE: Fixed by: https://github.com/nextcloud/desktop/commit/ba4138a13dff47904947042b55358660ffa08026 (v3.15.0)
 CVE-2025-47791 (Nextcloud Server is a self hosted personal cloud system. In Nextcloud  ...)
 	- nextcloud-server <itp> (bug #941708)
 CVE-2025-47790 (Nextcloud Server is a self hosted personal cloud system. Nextcloud Ser ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1b3ca9e93cbdce490cdc94da463b509eb49e22c2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1b3ca9e93cbdce490cdc94da463b509eb49e22c2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250516/47f0264f/attachment.htm>