Nextcloud talk is a video &... CVE-2023-28845

- AV AC AU C I A
发布: 2023-03-31
修订: 2023-04-07

Nextcloud talk is a video & audio conferencing app for Nextcloud. In affected versions the talk app does not properly filter access to a conversations member list. As a result an attacker could use this vulnerability to gain information about the members of a Talk conversation, even if they themselves are not members. It is recommended that the Nextcloud Talk is upgraded to 14.0.9 or 15.0.4. There are no known workarounds for this vulnerability.

0%
暂无可用Exp或PoC
当前有2条受影响产品信息