CVE-2022-29160

Katalog CVE

CVSS 3.3 · Low EPSS 0,37%

Kerentanan Improper Access Control pada nextcloud. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

Nextcloud Android is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.0, sensitive tokens, images, and user related details exist after deletion of a user account. This could result in misuse of the former account holder's information. Nextcloud Android version 3.19.0 contains a patch for this issue. There are no known workarounds available.

Rincian

Terbit di NVD

20 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control
CWE-459: Incomplete Cleanup

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 28,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/nextcloud/android/pull/9644 issue tracking · patch · advisory pihak ketiga
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-xcj9-3jch-qr2r issue tracking · advisory pihak ketiga
• https://hackerone.com/reports/1222873 exploit · issue tracking · advisory pihak ketiga