Vulnerability Details CVE-2022-29160
Nextcloud Android is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.0, sensitive tokens, images, and user related details exist after deletion of a user account. This could result in misuse of the former account holder's information. Nextcloud Android version 3.19.0 contains a patch for this issue. There are no known workarounds available.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.0%
CVSS Severity
CVSS v3 Score 2.8
CVSS v2 Score 2.1
References
- https://github.com/nextcloud/android/pull/9644
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-xcj9-3jch-qr2r
- https://hackerone.com/reports/1222873
- https://github.com/nextcloud/android/pull/9644
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-xcj9-3jch-qr2r
- https://hackerone.com/reports/1222873
Products affected by CVE-2022-29160
-
cpe:2.3:a:nextcloud:nextcloud:1.0.0
-
cpe:2.3:a:nextcloud:nextcloud:1.0.1
-
cpe:2.3:a:nextcloud:nextcloud:1.1.0
-
cpe:2.3:a:nextcloud:nextcloud:1.2.0
-
cpe:2.3:a:nextcloud:nextcloud:1.3.0
-
cpe:2.3:a:nextcloud:nextcloud:1.3.1
-
cpe:2.3:a:nextcloud:nextcloud:1.4.0
-
cpe:2.3:a:nextcloud:nextcloud:1.4.1
-
cpe:2.3:a:nextcloud:nextcloud:1.4.2
-
cpe:2.3:a:nextcloud:nextcloud:1.4.3
-
cpe:2.3:a:nextcloud:nextcloud:2.0.0
-
cpe:2.3:a:nextcloud:nextcloud:2.0.1
-
cpe:2.3:a:nextcloud:nextcloud:3.0.0
-
cpe:2.3:a:nextcloud:nextcloud:3.0.1
-
cpe:2.3:a:nextcloud:nextcloud:3.0.2
-
cpe:2.3:a:nextcloud:nextcloud:3.0.3
-
cpe:2.3:a:nextcloud:nextcloud:3.1.0
-
cpe:2.3:a:nextcloud:nextcloud:3.10.0
-
cpe:2.3:a:nextcloud:nextcloud:3.15.1
-
cpe:2.3:a:nextcloud:nextcloud:3.16.0
-
cpe:2.3:a:nextcloud:nextcloud:3.2.0
-
cpe:2.3:a:nextcloud:nextcloud:3.2.1
-
cpe:2.3:a:nextcloud:nextcloud:3.2.2
-
cpe:2.3:a:nextcloud:nextcloud:3.2.3
-
cpe:2.3:a:nextcloud:nextcloud:3.2.4
-
cpe:2.3:a:nextcloud:nextcloud:3.3.0
-
cpe:2.3:a:nextcloud:nextcloud:3.3.1
-
cpe:2.3:a:nextcloud:nextcloud:3.3.2
-
cpe:2.3:a:nextcloud:nextcloud:3.4.0
-
cpe:2.3:a:nextcloud:nextcloud:3.4.1
-
cpe:2.3:a:nextcloud:nextcloud:3.4.2
-
cpe:2.3:a:nextcloud:nextcloud:3.5.0
-
cpe:2.3:a:nextcloud:nextcloud:3.5.1
-
cpe:2.3:a:nextcloud:nextcloud:3.6.0
-
cpe:2.3:a:nextcloud:nextcloud:3.6.1
-
cpe:2.3:a:nextcloud:nextcloud:3.6.2
-
cpe:2.3:a:nextcloud:nextcloud:3.7.0
-
cpe:2.3:a:nextcloud:nextcloud:3.7.1
-
cpe:2.3:a:nextcloud:nextcloud:3.9.0
-
cpe:2.3:a:nextcloud:nextcloud:3.9.1
-
cpe:2.3:a:nextcloud:nextcloud:3.9.2