CVE-2022-36075CWE-200

File list exposure in Nextcloud Files Access Control

Low · published September 15, 2022

CVSS v3.1
2.6
EPSS
1%
Percentile
46.3
In the wild
Unconfirmed
What it is

Nextcloud files access control is a nextcloud app to manage access control for files. Users with limited access can see file names in certain cases where they do not have privilege to do so. This issue has been addressed and it is recommended that the Nextcloud Files Access Control app is upgraded to 1.12.2, 1.13.1 or 1.14.1. There are no known workarounds for this issue

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00568 · 46.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-09-15T21:50Z
EPSS history
Timeline
  • 15 SEP 21:50Z
    File list exposure in Nextcloud Files Access Control
    cvelistv5