Talk@* Security Vulnerabilities and Issues — Talk@* CVE List

Lucene search

NextcloudTalk*

3 matches found

CVE•added 2020/02/04 8:15 p.m.•51 views

CVE-2019-15619

Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in a project.

4.8CVSS5AI score0.0025EPSS

CVE•added 2020/06/08 2:15 p.m.•45 views

CVE-2020-8180

A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator.

9.9CVSS9.6AI score0.00716EPSS

CVE•added 2020/02/04 8:15 p.m.•41 views

CVE-2019-15620

Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature.

4CVSS4.1AI score0.00162EPSS