Skip to main content
  1. Security/

Full Passcode bypass on Nextcloud App iOS

·1 min· loading · loading ·
Nextcloud bugbounty CVE-2023-28647
Christian Angel
Christian Angel
Table of Contents
It’s possible to fully access the user’s nextcloud files on Nextcloud App iOS by using the Files app on iPhone.

Proof of Concept:

  1. Download the nextcloud iOS app
  2. Login your account
  3. set a passcode
  4. Open the files app then go to > Browse
  5. Under the locations pick nextcloud
  6. click turn on