MEDIUM🇬🇧 English

CVE-2022-39212

CVSS 4.3v3.1pub. 2022-09-17upd. 2024-11-21

Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an attacker could see the last video frame of any participant who has video disabled but a camera selected. It is recommended that the Nextcloud Talk app is upgraded to 13.0.8 or 14.0.4. Users unable to upgrade should select "None" as camera before joining the call.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  • Nextcloud Talk

    APP
    Nextcloud
    < 13.0.814.0.0 – 14.0.4 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2020-8180CRITICAL9.9ten sam produkt

A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitiz...

CVE-2023-39957HIGH7.8ten sam produkt

Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android. Prior to vers...

CVE-2021-32689HIGH8.1ten sam produkt

Nextcloud Talk is a fully on-premises audio/video and chat communication service. In versions prior to 11.2.2,...

CVE-2023-45149MEDIUM4.3ten sam produkt

Nextcloud talk is a chat module for the Nextcloud server platform. In affected versions brute force protection...

CVE-2022-24887MEDIUM4.3ten sam produkt

Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior...