Medium severity · published Apr 27, 2022
CVE-2022-24887
Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform
6.1
CVSS
0.9%
EPSS
No
On KEV
Description
Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versions 11.3.4, 12.2.2, and 13.0.0, when sharing a Deck card in conversation, the metaData can be manipulated so users can be tricked into opening arbitrary URLs. This issue is fixed in versions 11.3.4, 12.2.2, and 13.0.0. There are currently no known workarounds.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TA
Talk · Nextcloud
before 11.3.4; 12.0.0 before 12.2.4; 13.0.0; 13.0.0; 13.0.0; 13.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-24887
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-24887
Third Party Advisory
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j45w-7mpq-264c
Patch
https://github.com/nextcloud/spreed/pull/6410
Exploit
https://hackerone.com/reports/1358977
More from Talk
9.9
CVE-2020-8180
A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator
7.8
CVE-2023-39957
Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android
6.5
CVE-2021-32689
Nextcloud Talk is a fully on-premises audio/video and chat communication service
6.5
CVE-2021-32676
Nextcloud Talk is a fully on-premises audio/video and chat communication service
6.1
CVE-2021-41180
Nextcloud talk is a self hosting messaging service