Lucene search
GoogleOSV:CVE-2022-24887HistoryApr 27, 2022 - 2:15 p.m.
CVE-2022-24887
2022-04-2714:15:09
Google
osv.dev
6
nextcloud
talk
vulnerability
sharing
deck card
metadata
manipulated
arbitrary urls
fixed
versions
Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versions 11.3.4, 12.2.2, and 13.0.0, when sharing a Deck card in conversation, the metaData can be manipulated so users can be tricked into opening arbitrary URLs. This issue is fixed in versions 11.3.4, 12.2.2, and 13.0.0. There are currently no known workarounds.
Related
hackerone
hackerone
nextcloud
nextcloud
prion
prion
Code injection
2022-04-27 14:15:00
cve
cve
CVE-2022-24887
2022-04-27 14:15:09
nvd
nvd
CVE-2022-24887
2022-04-27 14:15:09
cvelist
cvelist
CVE-2022-24887 Open Redirect in Nextcloud Talk
2022-04-27 13:55:11