← Back

CVE-2022-29163

nvd nist
Published: May 20, 2022Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.6 and 23.0.3, a user can create a link that is not password protected even if the administrator requires links to be password protected. Versions 22.2.6 and 23.0.3 contain a patch for this issue. There are currently no known workarounds.

Affected (2)

Nextcloud
1 product
Nextcloud Server
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Nextcloud
Nextcloud Server
Before 22.2.6
Nextcloud Server
From 23.0.0 to 23.0.3

Related CWEs

CWE-671
Lack of Administrator Control over Security
The product uses security features in a way that prevents the product's administrator from tailoring security settings to reflect the environment in which the product is being used. This introduces resultant weaknesses or prevents it from operating at a level of security that is desired by the administrator.

References (8)

Source: security-advisories@github.com
Issue TrackingPatchThird Party Advisory
Source: security-advisories@github.com
Issue TrackingPatchThird Party Advisory
Source: security-advisories@github.com
Issue TrackingThird Party Advisory
Source: security-advisories@github.com
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions Required

Timeline

No history available yet.