Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled by administrators without direct database access. Versions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available.
References
| Link | Resource |
|---|---|
| https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8f3p-rcm5-mrg3 | Third Party Advisory |
| https://github.com/nextcloud/server/pull/33643 | Patch Third Party Advisory |
| https://hackerone.com/reports/1675014 | Permissions Required Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
14 Jul 2023, 18:53
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-862 |
31 Oct 2022, 17:37
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:* cpe:2.3:a:nextcloud:nextcloud_enterprise_server:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CWE | CWE-863 | |
| First Time |
Nextcloud nextcloud Server
Nextcloud Nextcloud nextcloud Enterprise Server |
|
| References | (CONFIRM) https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8f3p-rcm5-mrg3 - Third Party Advisory | |
| References | (MISC) https://hackerone.com/reports/1675014 - Permissions Required, Third Party Advisory | |
| References | (MISC) https://github.com/nextcloud/server/pull/33643 - Patch, Third Party Advisory |
27 Oct 2022, 17:01
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-27 14:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-39329
Mitre link : CVE-2022-39329
CVE.ORG link : CVE-2022-39329
JSON object : View
Products Affected
nextcloud
- nextcloud_enterprise_server
- nextcloud_server