Unrated severityNVD Advisory· Published Sep 16, 2022· Updated Apr 23, 2025
Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server
CVE-2022-39211
Description
Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcloud Server is upgraded to 23.0.8 or 24.0.4. It is recommended that the Nextcloud Enterprise Server is upgraded to 22.2.10.4, 23.0.8 or 24.0.4. There are no known workarounds for this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <23.0.8 || <24.0.4 (for Nextcloud Server) / <22.2.10.4 || <23.0.8 || <24.0.4 (for Nextcloud Enterprise Server)
- nextcloud/security-advisoriesv5Range: < 23.0.8
Patches
Vulnerability mechanics
References
3- github.com/nextcloud/security-advisories/security/advisories/GHSA-rmf9-w497-8cq8mitrex_refsource_CONFIRM
- github.com/nextcloud/server/pull/32988mitrex_refsource_MISC
- github.com/nextcloud/server/pull/33031mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.