CVE-2021-32658

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Nextcloud Android is the Android client for the Nextcloud open source home cloud system. Due to a timeout issue the Android client may not properly clean all sensitive data on account removal. This could include sensitive key material such as the End-to-End encryption keys. It is recommended that the Nextcloud Android App is upgraded to 3.16.1

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200 CWE-212

Affected software

Vendor	Product	Versions
nextcloud	security-advisories	< 3.16.1

References

https://github.com/nextcloud/android/commit/355f3c745b464b741b20a3b96597303490c26333Patch, Third Party Advisory
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-g5gf-rmhm-wpxwThird Party Advisory
https://hackerone.com/reports/1189168Exploit, Patch, Third Party Advisory
https://github.com/nextcloud/android/commit/355f3c745b464b741b20a3b96597303490c26333Patch, Third Party Advisory
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-g5gf-rmhm-wpxwThird Party Advisory
https://hackerone.com/reports/1189168Exploit, Patch, Third Party Advisory

Timeline

Published: Jun 8, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-326594.9Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services. In versions 2.6.0 and earlier,CVE-2021-326608.1Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. CVE-2021-326617.3Backstage is an open platform for building developer portals. In versions of Backstage's Techdocs Plugin (`@backstage/plugin-techdocs`) prio CVE-2021-326626.5Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. CVE-2021-326637.5iTop is an open source web based IT Service Management tool. In affected versions an attacker can call the system setup without authenticati CVE-2021-326644.8Combodo iTop is an open source web based IT Service Management tool. In affected versions there is a XSS vulnerability on "run query" page w CVE-2021-326656.5wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversa CVE-2021-326666.5wire-ios is the iOS version of Wire, an open-source secure messaging app. In wire-ios versions 3.8.0 and prior, a vulnerability exists that CVE-2021-326675.4TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 1 CVE-2021-326684.8TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 1 CVE-2021-326695.4TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 1 CVE-2021-32677.2File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function.