CVE-2022-39329

Profile of disabled user stays accessible

CVSS 3.5 LOWEPSS 0.6%CWE-284 CWE-285

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled by administrators without direct database access. Versions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Productos afectados

nextcloud · security-advisories

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8f3p-rcm5-mrg3 https://github.com/nextcloud/server/pull/33643 https://hackerone.com/reports/1675014