CVE-2022-39346
25.11.2022, 19:15
Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could allow a malicious users to overload the backing database and cause a denial of service. It is recommended that the Nextcloud Server is upgraded to 22.2.10, 23.0.7 or 24.0.3. There are no known workarounds for this issue.Enginsight
| Vendor | Product | Version |
|---|---|---|
| nextcloud | nextcloud_enterprise_server | 𝑥 < 22.2.10 |
| nextcloud | nextcloud_enterprise_server | 23.0.0 ≤ 𝑥 < 23.0.7 |
| nextcloud | nextcloud_enterprise_server | 24.0.0 ≤ 𝑥 < 24.0.3 |
| nextcloud | nextcloud_server | 𝑥 < 22.2.10 |
| nextcloud | nextcloud_server | 23.0.0 ≤ 𝑥 < 23.0.7 |
| nextcloud | nextcloud_server | 24.0.0 ≤ 𝑥 < 24.0.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References