CVE-2022-31024: Nextcloud Richdocuments

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.0.0, 5.0.4, and 4.2.6, a user could be tricked into working against a remote Office by sending them a federated share. richdocuments versions 6.0.0, 5.0.4 and 4.2.6 contain a fix for this issue. There are currently no known workarounds available.

Affected products

• Nextcloud Richdocuments: before 4.2.6 (fixed in 4.2.6); from 5.0.0, before 5.0.4 (fixed in 5.0.4); version 6.0.0 only

Published 2022-06-02. Last modified 2026-06-17.