In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.
No PoCs from references.
- https://github.com/fkie-cad/nvd-json-data-feeds