Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Nextcloud ausnutzen, um Informationen offenzulegen.
Product
Nextcloud ist eine "on-premise" Plattform für Dateifreigabe und Zusammenarbeit.
Vulnerabilities 1
-
Low 2.6
Nextcloud Talk messages can still be seen on conversation after expiring when cron is misconfigured
Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they were then hidden by the frontend code. It is recommended tha…
Revision history
-
#1
Initiale Fassung
References
-
Nextcloud Security Advisory vom 2023-02-27
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j53p-r755-v4jf