Is Nextcloud Server 22.2.7 affected?
Apr 26, 2022 · Release notes ↗
12 known vulnerabilities affect 22.2.7 (highest CVSS 6.5).
Your branch 22 has reached end of life (Jul 31, 2022).
172 newer releases in its track, up to 35.0.2. What changed up to 35.0.2
Vulnerabilities affecting 22.2.7
- 6.5 CVE-2022-31118 Nextcloud server is an open source personal cloud solution. In affected versions an attacker could brute force to find if federated sharing is being used and potentially try to brute force access t… fixed in 22.2.9
- 6.4 CVE-2022-36074 Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to strip the Authorization header on HTTP downgrade.… fixed in 23.0.7
- 6.0 CVE-2023-25579 Nextcloud server is a self hosted home cloud product. In affected versions the `OC\Files\Node\Folder::getFullPath()` function was validating and normalizing the string in the wrong order. The funct… fixed in 22.2.10
- 5.4 CVE-2022-31014 Nextcloud server is an open source personal cloud server. Affected versions were found to be vulnerable to SMTP command injection. The impact varies based on which commands are supported by the bac… fixed in 22.2.8
- 5.3 CVE-2023-25162 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to 24.0.8 and 23.0.12 and Nextcloud Enterprise server prior to 24.0.8 and 23.… fixed in 23.0.12
- 4.8 CVE-2022-39330 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versi… fixed in 23.0.10
- 4.0 CVE-2022-39364 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server prior to versions 23.0.9 and 24.0.5 and Nextcloud Enterprise Server prior to ver… fixed in 23.0.9
- 3.7 CVE-2023-25161 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 25.0.1 24.0.8, and 23.0.12 missin… fixed in 23.0.12
- 3.5 CVE-2022-39346 Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could allow a malicious users to overload the backing… fixed in 22.2.10
- 3.5 CVE-2022-39329 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable… fixed in 23.0.9
- 3.0 CVE-2024-22403 Nextcloud server is a self hosted personal cloud system. In affected versions OAuth codes did not expire. When an attacker would get access to an authorization code they could authenticate at any t… fixed in 28.0.0
- 3.0 CVE-2022-39211 Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nex… fixed in 23.0.8
Newer releases
| 35.0.2 | Oct 15, 2026 | 22.2.7 → 35.0.2 |
| 35.0.1 | Sep 24, 2026 | 22.2.7 → 35.0.1 |
| 35.0.0 | Sep 15, 2026 | 22.2.7 → 35.0.0 |
| 34.0.5 | Oct 15, 2026 | 22.2.7 → 34.0.5 |
| 34.0.4 | Sep 10, 2026 | 22.2.7 → 34.0.4 |
| 34.0.3 | Aug 13, 2026 | 22.2.7 → 34.0.3 |
| 34.0.2 | Jul 23, 2026 | 22.2.7 → 34.0.2 |
| 34.0.1 | Jun 25, 2026 | 22.2.7 → 34.0.1 |
| 34.0.0 | Jun 8, 2026 | 22.2.7 → 34.0.0 |
| 33.0.10 | Oct 15, 2026 | 22.2.7 → 33.0.10 |
| 33.0.9 | Sep 10, 2026 | 22.2.7 → 33.0.9 |
| 33.0.8 | Aug 13, 2026 | 22.2.7 → 33.0.8 |
| 33.0.7 | Jul 23, 2026 | 22.2.7 → 33.0.7 |
| 33.0.6 | Jun 25, 2026 | 22.2.7 → 33.0.6 |
| 33.0.5 | Jun 2, 2026 | 22.2.7 → 33.0.5 |