BIT-nextcloud-2022-29160
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/nextcloud/BIT-nextcloud-2022-29160.json
- JSON Data
- https://api.osv.dev/v1/vulns/BIT-nextcloud-2022-29160
- Aliases
-
- CVE-2022-29160
- GHSA-xcj9-3jch-qr2r
- Published
- 2026-07-12T23:47:49.478Z
- Modified
- 2026-07-13T06:26:39.267988867Z
- Summary
- Sensitive files/data exist after deletion of user account in Nextcloud Android
- Details
-
Nextcloud Android is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.0, sensitive tokens, images, and user related details exist after deletion of a user account. This could result in misuse of the former account holder's information. Nextcloud Android version 3.19.0 contains a patch for this issue. There are no known workarounds available.
- Database specific
{ "cpes": [ "cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:*:android:*:*" ], "severity": "Low" }- References
Affected packages
Bitnami / nextcloud
Package
- Name
- nextcloud
- Purl
- pkg:bitnami/nextcloud
Severity
- 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator