Nextcloud Talk Cross-Site Scripting Vulnerability (CNVD-2022-18416)

2021-12-1000:00:00

China National Vulnerability Database

www.cnvd.org.cn

0.001 Low

EPSS

Percentile

31.8%

JSON

Nextcloud Talk, a self-hosted local audio/video and chat communication service from Germany-based Nextcloud, is vulnerable to a cross-site scripting vulnerability that could be exploited by remote attackers to inject and execute arbitrary HTML and script code in the user’s browser within the context of the website.

CPENameOperatorVersion
nextcloud nextcloud talklt22.0.1
nextcloud nextcloud talklt10.0.7
nextcloud nextcloud talklt10.1.4
nextcloud nextcloud talklt11.1.2
nextcloud nextcloud talklt11.2.0
nextcloud nextcloud talklt12.0.0

Name	Operator	Version
nextcloud nextcloud talk	lt	22.0.1
nextcloud nextcloud talk	lt	10.0.7
nextcloud nextcloud talk	lt	10.1.4
nextcloud nextcloud talk	lt	11.1.2
nextcloud nextcloud talk	lt	11.2.0
nextcloud nextcloud talk	lt	12.0.0

0.001 Low

EPSS

Percentile

31.8%

JSON

Related for CNVD-2022-18416