Описание
Nextcloud Talk is a fully on-premises audio/video and chat communication service. Password protected shared chats in Talk before version 9.0.10, 10.0.8 and 11.2.2 did not rotate the session cookie after a successful authentication event. It is recommended that the Nextcloud Talk App is upgraded to 9.0.10, 10.0.8 or 11.2.2. No workarounds for this vulnerability are known to exist.
Ссылки
- Third Party Advisory
- Issue TrackingThird Party Advisory
- Third Party Advisory
- Issue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 9.0.10 (исключая)Версия от 10.0.0 (включая) до 10.0.8 (исключая)Версия от 11.2.0 (включая) до 11.2.2 (исключая)
Одно из
cpe:2.3:a:nextcloud:talk:*:*:*:*:*:*:*:*
cpe:2.3:a:nextcloud:talk:*:*:*:*:*:*:*:*
cpe:2.3:a:nextcloud:talk:*:*:*:*:*:*:*:*
EPSS
Процентиль: 55%
0.00325
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-384
EPSS
Процентиль: 55%
0.00325
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-384