CVE-2022-31014

Nextcloud server is an open source personal cloud server. Affected versions were found to be vulnerable to SMTP command injection. The impact varies based on which commands are supported by the backend SMTP server. However, the main risk here is that the attacker can then hijack an already-authenticated SMTP session and run arbitrary SMTP commands as the email user, such as sending emails to other users, changing the FROM user, and so on. As before, this depends on the configuration of the server itself, but newlines should be sanitized to mitigate such arbitrary SMTP command injection. It is recommended that the Nextcloud Server is upgraded to 22.2.8 , 23.0.5 or 24.0.1. There are no known workarounds for this issue.

• CWE-74
• CWE-93
• CWE-74

• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-264h-3v4w-6xh2Exploit, Third Party Advisory
• https://github.com/nextcloud/server/pull/32428Issue Tracking, Patch, Third Party Advisory
• https://hackerone.com/reports/1516377Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-264h-3v4w-6xh2Exploit, Third Party Advisory
• https://github.com/nextcloud/server/pull/32428Issue Tracking, Patch, Third Party Advisory
• https://hackerone.com/reports/1516377Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Jul 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31008RabbitMQ is a multi-protocol messaging and streaming broker.…7.5
• CVE-2022-31009wire-ios is an iOS client for the Wire secure messaging appl…6.5
• CVE-2022-3101A flaw was found in tripleo-ansible. Due to an insecure defa…5.5
• CVE-2022-31011TiDB is an open-source NewSQL database that supports Hybrid …7.8
• CVE-2022-31012Git for Windows is a fork of Git that contains Windows-speci…7.3
• CVE-2022-31013Chat Server is the chat server for Vartalap, an open-source …9.8
• CVE-2022-31015Waitress is a Web Server Gateway Interface server for Python…5.9
• CVE-2022-31016Argo CD is a declarative continuous deployment for Kubernete…6.5
• CVE-2022-31017Zulip is an open-source team collaboration tool. Versions 2.…2.6
• CVE-2022-31018Play Framework is a web framework for Java and Scala. A deni…7.5
• CVE-2022-31019Vapor is a server-side Swift HTTP web framework. When using …7.5
• CVE-2022-31020Indy Node is the server portion of a distributed ledger purp…8.8