Code injection

2022-09-1700:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

26.4%

JSON

Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an attacker could see the last video frame of any participant who has video disabled but a camera selected. It is recommended that the Nextcloud Talk app is upgraded to 13.0.8 or 14.0.4. Users unable to upgrade should select “None” as camera before joining the call.

CPENameOperatorVersion
talkge14.0.0
talklt14.0.4
talklt13.0.8

Name	Operator	Version
talk	ge	14.0.0
talk	lt	14.0.4
talk	lt	13.0.8

References

github.com/nextcloud/security-advisories/security/advisories/GHSA-wq3g-2x46-q2gv

github.com/nextcloud/spreed/pull/7673

0.001 Low

EPSS

Percentile

26.4%

JSON

Related for PRION:CVE-2022-39212