Nextcloud: Cross-room signaling injection enabling unauthorized force-mute

A cross-room signaling injection vulnerability was identified in the Talk application that allowed a low-privileged participant to inject moderator-only internal-signaling control messages into a victim's session. The vulnerability exploited the fact that the server checked moderator permissions...