CVE-2022-29160

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Nextcloud Android is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.0, sensitive tokens, images, and user related details exist after deletion of a user account. This could result in misuse of the former account holder's information. Nextcloud Android version 3.19.0 contains a patch for this issue. There are no known workarounds available.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-284CWE-459

Affected software

No affected versions have been published.

Timeline

Published
May 20, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-291619.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The XWiki Crypto API will generate CVE-2022-291627.8runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to versionCVE-2022-291634.3Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.6 and 23.0.3, a userCVE-2022-291647.1Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. In affected versions an attCVE-2022-2916510.0Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A critical vulnerability has been discovered in Argo CD starting wCVE-2022-291668.8matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into CVE-2022-291677.5Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification ofCVE-2022-291686.1Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when renderiCVE-2022-291697.5BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulneraCVE-2022-291708.5Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows CVE-2022-291717.2Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in thCVE-2022-291726.1Auth0 is an authentication broker that supports both social and enterprise identity providers, including Active Directory, LDAP, Google Apps