Lucene search

Talk Security Vulnerabilities - 2020

cve

CVE-2019-15619

Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in a project.

4.8CVSS

5AI Score

0.001EPSS

2020-02-04 08:15 PM

cve

CVE-2019-15620

Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature.

2.7CVSS

4.1AI Score

0.001EPSS

2020-02-04 08:15 PM

cve

CVE-2020-8180

A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator.

9.9CVSS

9.6AI Score

0.001EPSS

2020-06-08 02:15 PM