Unrated severityNVD Advisory· Published Oct 27, 2022· Updated Apr 23, 2025

Profile of disabled user stays accessible

CVE-2022-39329

Description

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled by administrators without direct database access. Versions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Serverllm-fuzzy
Range: <23.0.9 || <24.0.5
Nextcloud/Nextcloud Enterprise Serverllm-fuzzy
Range: <24.0.5
nextcloud/security-advisoriesv5
Range: < 23.0.9

Patches

Vulnerability mechanics

References

github.com/nextcloud/security-advisories/security/advisories/GHSA-8f3p-rcm5-mrg3mitre
github.com/nextcloud/server/pull/33643mitre
hackerone.com/reports/1675014mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000