CVE-2019-15620: Medium severity nextcloud talk vulnerability
Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-15620?
CVE-2019-15620 is a vulnerability in Nextcloud Talk 6.0.3 that allows improper access control, leaking the existence and name of private conversations when linked to another shared item via the projects feature.
What is the severity of CVE-2019-15620?
CVE-2019-15620 has a severity level of medium, with a severity value of 2.7.
How does CVE-2019-15620 affect Nextcloud Talk?
CVE-2019-15620 affects Nextcloud Talk version 6.0.3 and earlier, leaking the existence and name of private conversations when linked to another shared item via the projects feature.
What is the recommended fix for CVE-2019-15620?
To fix CVE-2019-15620, it is recommended to update Nextcloud Talk to version 6.0.4 or later.
Where can I find more information about CVE-2019-15620?
You can find more information about CVE-2019-15620 in the following references: [HackerOne report](https://hackerone.com/reports/662218) and [Nextcloud Security Advisory](https://nextcloud.com/security/advisory/?id=NC-SA-2020-011).