CVE-2022-36075

2022-09-1522:15:11

Google

osv.dev

nextcloud

files access control

unauthorized access

file names

software vulnerability

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%

JSON

Nextcloud files access control is a nextcloud app to manage access control for files. Users with limited access can see file names in certain cases where they do not have privilege to do so. This issue has been addressed and it is recommended that the Nextcloud Files Access Control app is upgraded to 1.12.2, 1.13.1 or 1.14.1. There are no known workarounds for this issue

CPENameOperatorVersion
files_accesscontroleq1.4.0
files_accesscontroleq1.2.2
files_accesscontroleq9.0.54RC1
files_accesscontroleq9.0.54
files_accesscontroleq1.8.1
files_accesscontroleq1.2.3
files_accesscontroleq1.3.0
files_accesscontroleq1.12.1
files_accesscontroleq1.6.0
files_accesscontroleq1.8.0

Name	Operator	Version
files_accesscontrol	eq	1.4.0
files_accesscontrol	eq	1.2.2
files_accesscontrol	eq	9.0.54RC1
files_accesscontrol	eq	9.0.54
files_accesscontrol	eq	1.8.1
files_accesscontrol	eq	1.2.3
files_accesscontrol	eq	1.3.0
files_accesscontrol	eq	1.12.1
files_accesscontrol	eq	1.6.0
files_accesscontrol	eq	1.8.0