MEDIUM🇵🇱 Wersja polska

CVE-2022-39212

CVSS 4.3v3.1pub. 2022-09-17upd. 2024-11-21

Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an attacker could see the last video frame of any participant who has video disabled but a camera selected. It is recommended that the Nextcloud Talk app is upgraded to 13.0.8 or 14.0.4. Users unable to upgrade should select "None" as camera before joining the call.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  • Nextcloud Talk

    APP
    Nextcloud
    < 13.0.814.0.0 – 14.0.4 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-8180CRITICAL9.9ten sam produkt

A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitiz...

CVE-2023-39957HIGH7.8ten sam produkt

Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android. Prior to vers...

CVE-2021-32689HIGH8.1ten sam produkt

Nextcloud Talk is a fully on-premises audio/video and chat communication service. In versions prior to 11.2.2,...

CVE-2023-45149MEDIUM4.3ten sam produkt

Nextcloud talk is a chat module for the Nextcloud server platform. In affected versions brute force protection...

CVE-2022-24887MEDIUM4.3ten sam produkt

Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior...