CVE-2021-41256 - OpenCVE

nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that gets reflected back, unintentionally giving read and write access to non-exported Content Providers in Nextcloud News for Android. Users should upgrade to version 0.9.9.63 or higher as soon as possible.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact None

AV:N/AC:M/Au:N/C:P/I:P/A:N

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Nextcloud	News

Configuration 1 [-]

cpe:2.3:a:nextcloud:news:*:*:*:*:*:android:*:*

No data.

References

Link	Providers
https://github.com/nextcloud/news-android/blob/master/security/GHSL-2021-1033_Nextcloud_News_for_Android.md
https://github.com/nextcloud/news-android/commit/05449cb666059af7de2302df9d5c02997a23df85
https://github.com/nextcloud/news-android/security/advisories/GHSA-2q9v-q3cc-h9f3

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2021-11-30T20:55:09

Updated: 2024-08-04T03:08:31.607Z

Reserved: 2021-09-15T00:00:00

Link: CVE-2021-41256

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2021-11-30T21:15:08.227

Modified: 2021-12-02T18:33:00.330

Link: CVE-2021-41256

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "news-android", "vendor": "nextcloud", "versions": [{"status": "affected", "version": "< 0.9.9.63"}]}], "descriptions": [{"lang": "en", "value": "nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that gets reflected back, unintentionally giving read and write access to non-exported Content Providers in Nextcloud News for Android. Users should upgrade to version 0.9.9.63 or higher as soon as possible."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-829", "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-11-30T20:55:09", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/nextcloud/news-android/security/advisories/GHSA-2q9v-q3cc-h9f3"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/nextcloud/news-android/commit/05449cb666059af7de2302df9d5c02997a23df85"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/nextcloud/news-android/blob/master/security/GHSL-2021-1033_Nextcloud_News_for_Android.md"}], "source": {"advisory": "GHSA-2q9v-q3cc-h9f3", "discovery": "UNKNOWN"}, "title": "Intent URI permissions manipulation in nextcloud news-android", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security-advisories@github.com", "ID": "CVE-2021-41256", "STATE": "PUBLIC", "TITLE": "Intent URI permissions manipulation in nextcloud news-android"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "news-android", "version": {"version_data": [{"version_value": "< 0.9.9.63"}]}}]}, "vendor_name": "nextcloud"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that gets reflected back, unintentionally giving read and write access to non-exported Content Providers in Nextcloud News for Android. Users should upgrade to version 0.9.9.63 or higher as soon as possible."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere"}]}]}, "references": {"reference_data": [{"name": "https://github.com/nextcloud/news-android/security/advisories/GHSA-2q9v-q3cc-h9f3", "refsource": "CONFIRM", "url": "https://github.com/nextcloud/news-android/security/advisories/GHSA-2q9v-q3cc-h9f3"}, {"name": "https://github.com/nextcloud/news-android/commit/05449cb666059af7de2302df9d5c02997a23df85", "refsource": "MISC", "url": "https://github.com/nextcloud/news-android/commit/05449cb666059af7de2302df9d5c02997a23df85"}, {"name": "https://github.com/nextcloud/news-android/blob/master/security/GHSL-2021-1033_Nextcloud_News_for_Android.md", "refsource": "MISC", "url": "https://github.com/nextcloud/news-android/blob/master/security/GHSL-2021-1033_Nextcloud_News_for_Android.md"}]}, "source": {"advisory": "GHSA-2q9v-q3cc-h9f3", "discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T03:08:31.607Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/nextcloud/news-android/security/advisories/GHSA-2q9v-q3cc-h9f3"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/nextcloud/news-android/commit/05449cb666059af7de2302df9d5c02997a23df85"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/nextcloud/news-android/blob/master/security/GHSL-2021-1033_Nextcloud_News_for_Android.md"}]}]}, "cveMetadata": {"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2021-41256", "datePublished": "2021-11-30T20:55:09", "dateReserved": "2021-09-15T00:00:00", "dateUpdated": "2024-08-04T03:08:31.607Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nextcloud:news:*:*:*:*:*:android:*:*", "matchCriteriaId": "6AE66228-EB01-42B8-B8BF-82D96439C696", "versionEndExcluding": "0.9.9.63", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that gets reflected back, unintentionally giving read and write access to non-exported Content Providers in Nextcloud News for Android. Users should upgrade to version 0.9.9.63 or higher as soon as possible."}, {"lang": "es", "value": "nextcloud news-android es un cliente Android para la aplicaci\u00f3n de lectura de noticias/feeds Nextcloud. En las versiones afectadas, la aplicaci\u00f3n Nextcloud News para Android presenta un problema de seguridad por el que una aplicaci\u00f3n maliciosa instalada en el mismo dispositivo puede enviarle una intenci\u00f3n arbitraria que es reflejada, dando involuntariamente acceso de lectura y escritura a proveedores de contenido no exportados en Nextcloud News para Android. Los usuarios deben actualizar a versi\u00f3n 0.9.9.63 o superior lo antes posible"}], "id": "CVE-2021-41256", "lastModified": "2021-12-02T18:33:00.330", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 0.6, "impactScore": 5.2, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2021-11-30T21:15:08.227", "references": [{"source": "security-advisories@github.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/nextcloud/news-android/blob/master/security/GHSL-2021-1033_Nextcloud_News_for_Android.md"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/nextcloud/news-android/commit/05449cb666059af7de2302df9d5c02997a23df85"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/nextcloud/news-android/security/advisories/GHSA-2q9v-q3cc-h9f3"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-829"}], "source": "security-advisories@github.com", "type": "Primary"}]}