{"id":"CVE-2023-23948","summary":"ownCloud Android app vulnerable to SQL Injection","details":"The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in `FileContentProvider.kt`. This issue can lead to information disclosure. Two databases, `filelist` and `owncloud_database`, are affected. In version 3.0, the `filelist` database was deprecated. However, injections affecting `owncloud_database` remain relevant as of version 3.0. ","modified":"2026-08-12T03:51:13.254263022Z","published":"2023-02-13T16:30:18.434Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/23xxx/CVE-2023-23948.json","unresolved_ranges":[{"extracted_events":[{"last_affected":"3.0"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"GitHub_M","cwe_ids":["CWE-89"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/23xxx/CVE-2023-23948.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23948"},{"type":"ADVISORY","url":"https://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/owncloud/android","events":[{"introduced":"0"},{"last_affected":"494b2f7f524ba8c57e7623907d3be8b896a12213"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:owncloud:owncloud_client:*:*:*:*:*:android:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"3.0"}]}}],"versions":["oc-android-3.0","oc-android-2.20_oem","oc-android-2.13.1_oem","oc-android-2.10.0","oc-android-2.10.0-beta.1","oc-android-2.9.3_oem","oc-android-2.9.2","oc-android-2.9.1","oc-android-2.9.0","oc-android-2.8.0","oc-android-2.8.0-beta.1","oc-android-2.7.0","oc-android-2.7.0-beta.1","oc-android-2.6.0","oc-android-2.5.0","oc-android-2.5.0-beta.2","oc-android-2.5.0-beta.1","oc-android-2.4.0","oc-android-2.3.0","oc-android-2.2.0","oc-android-2.1.2","oc-android-2.1.1","oc-android-2.1.0","oc-android-1.8","oc-android-1.7.1_signed","oc-android-1.7.0_signed","oc-android-1.7.0","oc-android-1.5.3","1.4.6-easy-setup","oc-android-1.4.6","oc-android-1.4.5","oc-android-1.4.4","oc-android-1.4.3","oc-android-1-4-0","oc-android-1-3-20","oc-android-1-3-19","oc-android-1-3-18","oc-android-1-3-17","oc-android-1-3-14","oc-android-1-3-13"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-23948.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}