CVE-2022-36075

Nextcloud files access control is a nextcloud app to manage access control for files. Users with limited access can see file names in certain cases where they do not have privilege to do so. This issue has been addressed and it is recommended that the Nextcloud Files Access Control app is upgraded to 1.12.2, 1.13.1 or 1.14.1. There are no known workarounds for this issue

• CWE-200
• CWE-269

• https://github.com/nextcloud/files_accesscontrol/pull/248Patch, Third Party Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4m73-g7v7-v62wThird Party Advisory
• https://github.com/nextcloud/files_accesscontrol/pull/248Patch, Third Party Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4m73-g7v7-v62wThird Party Advisory

Published

Sep 15, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3607Failure to Sanitize Special Elements into a Different Plane …6
• CVE-2022-36070Poetry is a dependency manager for Python. To handle depende…7.3
• CVE-2022-36071SFTPGo is configurable SFTP server with optional HTTP/S, FTP…8.1
• CVE-2022-36072SilverwareGames.io is a social network for users to play vid…5.9
• CVE-2022-36073RubyGems.org is the Ruby community gem host. A bug in passwo…8.8
• CVE-2022-36074Nextcloud server is an open source personal cloud product. A…7.5
• CVE-2022-36076NodeBB Forum Software is powered by Node.js and supports eit…7.5
• CVE-2022-36077The Electron framework enables writing cross-platform deskto…6.1
• CVE-2022-36078Binary provides encoding/decoding in Borsh and other formats…7.5
• CVE-2022-36079Parse Server is an open source backend that can be deployed …7.5
• CVE-2022-3608Cross-site Scripting (XSS) - Stored in GitHub repository tho…8.4
• CVE-2022-36080Wikmd is a file based wiki that uses markdown. Prior to vers…6.1