Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-31024
HistoryJun 02, 2022 - 7:15 p.m.

CVE-2022-31024

2022-06-0219:15:09
CWE-284
CWE-346
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

31.3%

JSON

richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.0.0, 5.0.4, and 4.2.6, a user could be tricked into working against a remote Office by sending them a federated share. richdocuments versions 6.0.0, 5.0.4 and 4.2.6 contain a fix for this issue. There are currently no known workarounds available.

Affected configurations

NVD
Node
nextcloudrichdocumentsRange<4.2.6
OR
nextcloudrichdocumentsRange5.0.0–5.0.4
OR
nextcloudrichdocumentsMatch6.0.0beta1

Related

nextcloud 1
osv 1
hackerone 1
cvelist 1
cve 1
prion 1
nextcloud
nextcloud
Federated editing allows iframing remote servers by default
2022-06-02 08:59:32
osv
osv
CVE-2022-31024
2022-06-02 19:15:09
hackerone
hackerone
Nextcloud: Federated editing allows iframing possibly malicious remotes
2021-05-27 09:46:43
cvelist
cvelist
CVE-2022-31024 Federated editing allows iframing remote servers by default in richdocuments
2022-06-02 18:25:11
cve
cve
CVE-2022-31024
2022-06-02 19:15:09
prion
prion
Design/Logic Flaw
2022-06-02 19:15:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

31.3%

JSON
Related for NVD:CVE-2022-31024
nextcloud1osv1hackerone1cvelist1cve1prion1