CVE:CVE-2022-39364
CNNVD:CNNVD-202210-2362
Nextcloud是德国Nextcloud公司的一套开源的自托管文件同步和共享的通信应用平台。
Nextcloud Server、Nextccloud Enterprise Server 24.0.5之前版本存在安全漏洞。攻击者利用该漏洞可以访问敏感信息。
solution:Upgrade nextcloud nextcloud_enterprise_server to a higher version than 22.2.10.5,23.0.9,24.0.5,and avoid the version (,22.2.10.5),[23.0.0,23.0.9),[24.0.0,24.0.5); Upgrade nextcloud nextcloud_server to a higher version than 23.0.9,24.0.5,and avoid the version (,23.0.9),[24.0.0,24.0.5)