Lucene search
+L

CVE-2022-31118

🗓️ 04 Aug 2022 16:50:10Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 131 Views🌐 WEB

Nextcloud server vuln: brute force attack on federated sharing. Upgrade to 22.2.9, 23.0.6, or 24.0.2. Disable if unable to upgrade

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2022-31118
4 Aug 202220:23
–circl
cnnvd
CNNVD
Nextcloud 安全漏洞
4 Aug 202200:00
–cnnvd
cvelist
Cvelist
CVE-2022-31118 Missing brute force protection on cloud federation sharing in Nextcloud Server
4 Aug 202216:50
–cvelist
euvd
EUVD
EUVD-2022-52752
3 Oct 202520:07
–euvd
nextcloud
Nextcloud
Missing brute force protection on cloud federation sharing
4 Aug 202206:25
–nextcloud
hackerone
Hacker One
Nextcloud: Brute force protections don't work
10 Jun 202211:34
–hackerone
mend
Mend
CVE-2022-31118
4 Aug 202216:50
–mend
nvd
NVD
CVE-2022-31118
4 Aug 202217:15
–nvd
openvas
OpenVAS
Nextcloud Server < 22.2.9, 23.x < 23.0.6, 24.x < 24.0.2 Improper Initialization (GHSA-2vwh-5v93-3vcq)
8 Aug 202200:00
–openvas
prion
Prion
Design/Logic Flaw
4 Aug 202217:15
–prion
Rows per page
NVD
Vulners
Node
OR
nextcloudnextcloud_serverRange23.0.0–23.0.6
nextcloudnextcloud_serverRange24.0.0–24.0.2
[
  {
    "product": "security-advisories",
    "vendor": "nextcloud",
    "versions": [
      {
        "status": "affected",
        "version": "< 22.2.9"
      },
      {
        "status": "affected",
        "version": ">= 23.0.0, < 23.0.6"
      },
      {
        "status": "affected",
        "version": ">= 24.0.0, < 24.0.2"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
access_tokenpathindex.php/settings/admin/sharingBrute-forceable federated sharing access tokens allow unauthorized access to federated shares; mitigated by upgrading Nextcloud or disabling federated sharing via the admin settings.CWE-307, CWE-770

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 04:44Current
4.5Medium risk
Vulners AI Score4.5
CVSS 3.15.3 - 6.5
EPSS0.00745
SSVC
131