CVE-2022-24741

PoC —

CVSS 3.1

6.5 medium

EPSS

2%p75

Published

Mar 9, 2022 (Mar 9, 2022)

Modified

Jun 17, 2026

Description

Nextcloud server is an open source, self hosted cloud style services platform. In affected versions an attacker can cause a denial of service by uploading specially crafted files which will cause the server to allocate too much memory / CPU. It is recommended that the Nextcloud Server is upgraded to 21.0.8 , 22.2.4 or 23.0.1. Users unable to upgrade should disable preview generation with the `'enable_previews'` config flag.

Vendors: nextcloud
Products: nextcloud server
Weakness: CWE-400, CWE-770
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.