CVE-2022-36075

🗓️ 15 Sep 2022 21:50:10Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 105 Views

Nextcloud files access control app allows unauthorized file name access. Update to versions 1.12.2, 1.13.1 or 1.14.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-36075	16 Sep 202202:27	–	circl
CNNVD	NextCloud information leakage vulnerability	15 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-36075 File list exposure in Nextcloud Files Access Control	15 Sep 202221:50	–	cvelist
EUVD	EUVD-2022-38833	3 Oct 202520:07	–	euvd
Nextcloud	Listing folder content blocked by files access control when received as share	15 Sep 202208:34	–	nextcloud
Mend	CVE-2022-36075	15 Sep 202221:50	–	mend
NVD	CVE-2022-36075	15 Sep 202222:15	–	nvd
osv_cve	CVE-2022-36075 File list exposure in Nextcloud Files Access Control	15 Sep 202221:50	–	osv_cve
Prion	Design/Logic Flaw	15 Sep 202222:15	–	prion
Positive Technologies	PT-2022-23163 · Nextcloud · Nextcloud Files Access Control App	15 Sep 202200:00	–	ptsecurity

NVD

Vulners

Node

nextcloud files_access_controlRange<1.12.2

nextcloud files_access_controlMatch1.13.0

nextcloud files_access_controlMatch1.14.0

[
  {
    "product": "security-advisories",
    "vendor": "nextcloud",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.12.2"
      },
      {
        "status": "affected",
        "version": ">= 1.13.0, < 1.13.1"
      },
      {
        "status": "affected",
        "version": ">= 1.14.0, < 1.14.1"
      }
    ]
  }
]