What is CVE-2022-39330?

CVE-2022-39330 is a vulnerability in Nextcloud Server and Nextcloud Enterprise Server that allows a logged-in attacker to slow down the system.

How does CVE-2022-39330 affect Nextcloud Server?

CVE-2022-39330 affects Nextcloud Server prior to versions 23.0.10 and 24.0.6.

How does CVE-2022-39330 affect Nextcloud Enterprise Server?

CVE-2022-39330 affects Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6.

What is the severity of CVE-2022-39330?

CVE-2022-39330 has a severity level of medium.

How can I fix CVE-2022-39330?

To fix CVE-2022-39330, you should update Nextcloud Server to versions 23.0.10 or 24.0.6, and Nextcloud Enterprise Server to versions 22.2.10, 23.0.10, or 24.0.6.

Vulnerability/
CVE-2022-39330

medium

4.8

CWE

400

27/10/2022

1/11/2022

CVE-2022-39330

First published: Thu Oct 27 2022(Updated: )

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a logged-in attacker slowing down the system by generating a lot of database/cpu load. Nextcloud Server versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server versions 22.2.10, 23.0.10, and 24.0.6 contain patches for this issue. As a workaround, disable the Circles app.

Credit: security-advisories@github.com

Affected Software	Affected Version	How to fix
Nextcloud Nextcloud Enterprise Server	<22.2.10
Nextcloud Nextcloud Enterprise Server	>=23.0.0<23.0.10
Nextcloud Nextcloud Enterprise Server	>=24.0.0<24.0.6
Nextcloud Nextcloud Server	<23.0.10
Nextcloud Nextcloud Server	>=24.0.0<24.0.6

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2022-39330?
CVE-2022-39330 is a vulnerability in Nextcloud Server and Nextcloud Enterprise Server that allows a logged-in attacker to slow down the system.
How does CVE-2022-39330 affect Nextcloud Server?
CVE-2022-39330 affects Nextcloud Server prior to versions 23.0.10 and 24.0.6.
How does CVE-2022-39330 affect Nextcloud Enterprise Server?
CVE-2022-39330 affects Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6.
What is the severity of CVE-2022-39330?
CVE-2022-39330 has a severity level of medium.
How can I fix CVE-2022-39330?
To fix CVE-2022-39330, you should update Nextcloud Server to versions 23.0.10 or 24.0.6, and Nextcloud Enterprise Server to versions 22.2.10, 23.0.10, or 24.0.6.

collector/nvd-index
agent/type
vendor/nextcloud
canonical/nextcloud nextcloud enterprise server
version/nextcloud nextcloud enterprise server/23.0.0
version/nextcloud nextcloud enterprise server/24.0.0
canonical/nextcloud nextcloud server
version/nextcloud nextcloud server/24.0.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.