CVE:CVE-2022-31014
CNNVD:CNNVD-202207-394
Nextcloud是德国Nextcloud公司的一套开源的自托管文件同步和共享的通信应用平台。
Nextcloud 存在注入漏洞，该漏洞源于容易受到 SMTP 命令注入的攻击。
solution:Upgrade nextcloud nextcloud_server to a higher version than 19.0.13.7,22.2.8,20.0.14.6,21.0.9.5,23.0.5,24.0.0,24.0.0:beta1,24.0.0:beta2,24.0.0:beta3,24.0.0:rc1,24.0.0:rc2,24.0.0:rc3,and avoid the version (,19.0.13.7),(,22.2.8),[20.0.0,20.0.14.6),[21.0.0,21.0.9.5),[23.0.0,23.0.5),24.0.0,24.0.0:beta1,24.0.0:beta2,24.0.0:beta3,24.0.0:rc1,24.0.0:rc2,24.0.0:rc3