Skip to content
Sign in
Not rated

CVE-2019-15620 Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked…

Description

Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature.

Affected products and versions

Product Affected versions Fixed in
Nextcloud Talk 6.0.4 No fix stated

Other CVEs of Nextcloud Talk

The 2 CVEs of Nextcloud Talk →
CVE-2020-8180 A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk… Not rated
Track this CVE