Auth bypass in Nextcloud Mail
CVE-2022-31131
Nextcloud mail is a Mail app for the Nextcloud home server product. Versions of Nextcloud mail prior to 1.12.2 were found to be missing user account ownership checks when performing tasks related to mail attachments. Attachments may have been exposed to incorrect system users. It is recommended that the Nextcloud Mail app is upgraded to 1.12.2. There are no known workarounds for this issue. ### Workarounds No workaround available ### References * [Pull request](https://github.com/nextcloud/mail/pull/6600) * [HackerOne](https://hackerone.com/reports/1579820) ### For more information If you have any questions or comments about this advisory: * Create a post in [nextcloud/security-advisories](https://github.com/nextcloud/security-advisories/discussions) * Customers: Open a support ticket at [support.nextcloud.com](https://support.nextcloud.com)
Vulnerability class: Broken Authentication
EPSS: 0.007 (50.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.
Affected products
- Nextcloud Nextcloud_mail
- Nextcloud Security-advisories — versions < 1.12.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Exploit, Third Party Advisory, Issue Tracking)
- security-advisories@github.com (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)
- security-advisories@github.com (Patch, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2022-31131?
- CVE-2022-31131 is a medium-severity vulnerability in Nextcloud Mail, classified under Improper Authentication. CVSS score: 5.4/10. Published 2022-07-06.
- How severe is CVE-2022-31131?
- Medium severity. CVSS v3 base score is 5.4 out of 10.