Vulnerability CVE-2022-29163


Published: 2022-05-20

Description:
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.6 and 23.0.3, a user can create a link that is not password protected even if the administrator requires links to be password protected. Versions 22.2.6 and 23.0.3 contain a patch for this issue. There are currently no known workarounds.

Type:

CWE-671

(Lack of Administrator Control over Security)

 References:
https://hackerone.com/reports/1406926
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-pwjv-h37v-c4fx
https://github.com/nextcloud/circles/pull/926
https://github.com/nextcloud/circles/pull/866

Copyright 2026, cxsecurity.com

 

Back to Top