Vulnerabilities > CVE-2023-39957 - Unspecified vulnerability in Nextcloud Talk

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

nextcloud

NVD

Published: 2023-08-10

Updated: 2024-11-21

Summary

Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android. Prior to version 17.0.0, an unprotected intend allowed malicious third party apps to trick the Talk Android app into writing files outside of its intended cache directory. Nextcloud Talk Android version 17.0.0 has a patch for this issue. No known workarounds are available.

Vulnerable Configurations

Part	Description	Count
Application	Nextcloud Nextcloud Talk - Nextcloud Talk 0.1.0 Nextcloud Talk 0.1.1 Nextcloud Talk 0.1.2 Nextcloud Talk 0.2.0 Nextcloud Talk 1.0 Nextcloud Talk 1.0.1 Nextcloud Talk 1.0.2 Nextcloud Talk 1.0.3 Nextcloud Talk 1.0.4 Nextcloud Talk 1.0.5 Nextcloud Talk 1.0.6 Nextcloud Talk 1.0.7 Nextcloud Talk 1.0.8 Nextcloud Talk 1.0.9 Nextcloud Talk 1.0.10 Nextcloud Talk 1.0.11 Nextcloud Talk 1.0.12 Nextcloud Talk 1.0.13 Nextcloud Talk 1.0.14 Nextcloud Talk 1.1.0 Nextcloud Talk 1.1.1 Nextcloud Talk 1.1.2 Nextcloud Talk 1.1.3 Nextcloud Talk 1.2.0 Nextcloud Talk 2.0.0 Nextcloud Talk 2.0.1 Nextcloud Talk 2.0.2 Nextcloud Talk 2.1.0 Nextcloud Talk 2.1.1 Nextcloud Talk 2.1.2 Nextcloud Talk 3.0.0 Nextcloud Talk 3.0.1 Nextcloud Talk 3.1.0 Nextcloud Talk 3.1.1 Nextcloud Talk 3.1.2 Nextcloud Talk 3.1.3 Nextcloud Talk 3.2.0 Nextcloud Talk 3.2.1 Nextcloud Talk 3.2.2 Nextcloud Talk 3.2.3 Nextcloud Talk 3.2.4 Nextcloud Talk 3.2.5 Nextcloud Talk 3.2.6 Nextcloud Talk 3.2.7 Nextcloud Talk 3.3.0 Nextcloud Talk 6.0.0 Nextcloud Talk 6.0.1 Nextcloud Talk 6.0.2 Nextcloud Talk 6.0.3 Nextcloud Talk 6.0.4 Nextcloud Talk 6.0.5 Nextcloud Talk 6.0.6 Nextcloud Talk 6.0.7 Nextcloud Talk 6.1.0 Nextcloud Talk 6.1.1 Nextcloud Talk 6.1.2 Nextcloud Talk 6.1.3 Nextcloud Talk 6.1.4 Nextcloud Talk 6.1.5 Nextcloud Talk 6.1.6 Nextcloud Talk 7.0.0 Nextcloud Talk 7.0.1 Nextcloud Talk 7.0.2 Nextcloud Talk 7.0.3 Nextcloud Talk 7.0.4 Nextcloud Talk 7.0.5 Nextcloud Talk 7.0.6 Nextcloud Talk 7.0.7 Nextcloud Talk 7.0.8 Nextcloud Talk 8.0.0 Nextcloud Talk 8.0.1 Nextcloud Talk 8.0.2 Nextcloud Talk 8.0.3 Nextcloud Talk 8.0.4 Nextcloud Talk 8.0.5 Nextcloud Talk 8.0.6 Nextcloud Talk 8.0.7 Nextcloud Talk 8.0.8 Nextcloud Talk 8.0.9 Nextcloud Talk 8.0.10 Nextcloud Talk 8.1.0 Nextcloud Talk 8.2.0 Nextcloud Talk 9.0.0 Nextcloud Talk 11.0.0 Nextcloud Talk 11.0.1 Nextcloud Talk 11.1.0 Nextcloud Talk 11.1.1 Nextcloud Talk 11.1.2 Nextcloud Talk 11.2.0 Nextcloud Talk 12.1.0 Nextcloud Talk 12.1.1 Nextcloud Talk 12.1.2 Nextcloud Talk 12.2.0 Nextcloud Talk 12.2.1 Nextcloud Talk 12.3.0 Nextcloud Talk 12.4.0 Nextcloud Talk 13.0.0 Nextcloud Talk 14.1.0 Nextcloud Talk 14.1.1 Nextcloud Talk 14.2.0 Nextcloud Talk 15.0.0 Nextcloud Talk 15.0.1 Nextcloud Talk 15.0.2 Nextcloud Talk 17.0.0	169

Summary

Vulnerable Configurations

References