CVE-2022-35932

nextcloud talk

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-35932

Katalog CVE

CVSS 5.3 · Medium EPSS 1,4%

Kerentanan Exposure of Private Personal Information to an Unauthorized Actor pada nextcloud talk. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Nextcloud Talk is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.7, 13.0.7, and 14.0.3, password protected conversations are susceptible to brute force attacks if the attacker has the link/conversation token. It is recommended that the Nextcloud Talk application is upgraded to 12.2.7, 13.0.7 or 14.0.3. There are currently no known workarounds available apart from not having password protected conversations.

Rincian

Terbit di NVD
12 Agustus 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-359: Exposure of Private Personal Information to an Unauthorized Actor
CWE-307: Improper Restriction of Excessive Authentication Attempts
EPSS (30 hari)
1,4% peluang dieksploitasi; lebih tinggi dari 71,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
nextcloud talk Semua versi sebelum 12.2.7
nextcloud talk Versi 13.0.0 hingga sebelum 13.0.7
nextcloud talk Versi 14.0.0 hingga sebelum 14.0.3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.