CVE-2023-22473
Low
Description
Talk-Android enables users to have video & audio calls through Nextcloud on Android. Due to passcode bypass, an attacker is able to access the user's Nextcloud files and view conversations. To exploit this the attacker needs to have physical access to the target's device. There are currently no known workarounds available. It is recommended that the Nextcloud Talk Android app is upgraded to 15.0.2.
SeverityLow
CVSS2.1
Exploit probability—
Product
Nextcloud Talk
PublishedJan 9, 2023
First seenJan 9, 2023
Weakness typeCWE-284Improper access control
How to fix
Update
- nextcloud talk15.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nextcloud talk | v < 15.0.2 | 15.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.