Description (CNA)
A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Nextcloud Talk | affected Fixed in >= 8.0.8 |
CWE
CWE-94
References
ADP enrichment
No English description supplied.