CVE-2021-22895

Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the "Register with a Provider" flow.

Date published : 2021-06-11

https://www.debian.org/security/2021/dsa-4974

https://github.com/nextcloud/desktop/pull/2926