CVE-2020-8180

CVE-2020-8180 affects Nextcloud Talk versions 6.0.4, 7.0.2, and 8.0.7. A too-lax validation allows an administrator-added, not properly sanitized talk command to inject code. This can lead to arbitrary code execution when a crafted command is processed (for example, using talk commands to trigger...