Low severity2.8NVD Advisory· Published May 20, 2022· Updated Jun 17, 2026

CVE-2022-29160

Description

Nextcloud Android is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.0, sensitive tokens, images, and user related details exist after deletion of a user account. This could result in misuse of the former account holder's information. Nextcloud Android version 3.19.0 contains a patch for this issue. There are no known workarounds available.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Android Appllm-fuzzy
Range: <3.19.0
osv-coords
pkg:bitnami/nextcloud
Range: < 3.19.0
nextcloud/security-advisoriesv5
Range: < 3.19.0

Patches

Vulnerability mechanics

References

github.com/nextcloud/android/pull/9644nvdIssue TrackingPatchThird Party Advisory
hackerone.com/reports/1222873nvdExploitIssue TrackingThird Party Advisory
github.com/nextcloud/security-advisories/security/advisories/GHSA-xcj9-3jch-qr2rnvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.182
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000