Low severity3.0NVD Advisory· Published Sep 16, 2022· Updated Jun 17, 2026

CVE-2022-39211

Description

Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcloud Server is upgraded to 23.0.8 or 24.0.4. It is recommended that the Nextcloud Enterprise Server is upgraded to 22.2.10.4, 23.0.8 or 24.0.4. There are no known workarounds for this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Nextcloud Enterprise Server
cpe:2.3:a:nextcloud:nextcloud_enterprise_server:*:*:*:*:*:*:*:*
Range: <22.2.10.4
Nextcloud/Server2 versions
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*range: <23.0.8
- (no CPE)range: before 23.0.8, 24.0.4, 22.2.10.4
Nextcloud/security-advisoriescpe-rescue
Range: < 23.0.8

Patches

Vulnerability mechanics

References

github.com/nextcloud/server/pull/32988nvdPatchThird Party Advisory
github.com/nextcloud/server/pull/33031nvdPatchThird Party Advisory
github.com/nextcloud/security-advisories/security/advisories/GHSA-rmf9-w497-8cq8nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.195
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000