Nextcloud server information disclosure vulnerability (CNVD-2022-20691)

Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from the German company Nextcloud. nextcloud server is a self-hosted system designed to provide cloud-style services. nextcloud server is vulnerable to an information disclosure vulnerability that stems from the failure of the user state API to take into account the administrator’s user enumeration settings. An attacker could exploit the vulnerability to enumerate users to obtain further information.