CVE-2022-39211: Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server
Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcloud Server is upgraded to 23.0.8 or 24.0.4. It is recommended that the Nextcloud Enterprise Server is upgraded to 22.2.10.4, 23.0.8 or 24.0.4. There are no known workarounds for this issue.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-39211?
CVE-2022-39211 is a vulnerability in Nextcloud server that allows locally running webservices to be found and requested erroneously.
How severe is CVE-2022-39211?
CVE-2022-39211 has a severity rating of 5.3, which is considered medium.
How can I fix CVE-2022-39211?
To fix CVE-2022-39211, it is recommended to upgrade the Nextcloud Server to version 23.0.8 or 24.0.4.
Is Nextcloud Enterprise Server affected by CVE-2022-39211?
Yes, Nextcloud Enterprise Server versions up to and including 22.2.10.4 are affected by CVE-2022-39211.
Are there any known exploits available for CVE-2022-39211?
There are currently no known exploits available for CVE-2022-39211.