CVEvulnerability

CVE-2022-39329

5.3 MEDIUM Published 2022-10-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-10-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-284, CWE-285, CWE-862

Description

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled by administrators without direct database access. Versions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available.

Affected configurations

• nextcloud nextcloud enterprise server (< 23.0.9) • nextcloud nextcloud enterprise server (>= 24.0.0 < 24.0.5) • nextcloud nextcloud server (< 23.0.9) • nextcloud nextcloud server (>= 24.0.0 < 24.0.5)

Related

Weakness · CWE (3)

  • CWE-284 Improper Access Control weakness
  • CWE-285 Improper Authorization weakness
  • CWE-862 Missing Authorization weakness

References