Nextcloud Talk 13.0.0 Release Candidate 4
Approved changes feed: RSS · Atom
cpe:2.3:a:nextcloud:talk:13.0.0:rc4:*:*:*:*:*:*
part: a version: 13.0.0 update: rc4
| Vendor | Nextcloud (e5ae4298-6932-564f-a40d-08cebea039a5) |
|---|---|
| Product | Talk (db48beeb-84ef-573a-aaae-25687287e81a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/nextcloud/spreed |
purl2cpe | 2026-06-01 10:17:58.594771 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-24887 |
vulnerable | 2026-06-03 14:46:36.529903 |
Open Redirect in Nextcloud Talk
MEDIUM (4.3)
Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versions 11.3.4, 12.2.2, and 13.0.0, when sharing a Deck card in conversation, the metaData can be manipulated so users can be tricked into opening arbitrary URLs. This issue is fixed in versions 11.3.4, 12.2.2, and 13.0.0. There are currently no known workarounds.
Published: 2022-04-27T13:55:11.000Z
Updated: 2025-04-22T18:03:04.108Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.