Unrated severityNVD Advisory· Published Apr 27, 2022· Updated Apr 22, 2025
Open Redirect in Nextcloud Talk
CVE-2022-24887
Description
Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versions 11.3.4, 12.2.2, and 13.0.0, when sharing a Deck card in conversation, the metaData can be manipulated so users can be tricked into opening arbitrary URLs. This issue is fixed in versions 11.3.4, 12.2.2, and 13.0.0. There are currently no known workarounds.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- nextcloud/security-advisoriesv5Range: < 11.3.4
Patches
Vulnerability mechanics
References
3- github.com/nextcloud/security-advisories/security/advisories/GHSA-j45w-7mpq-264cmitrex_refsource_CONFIRM
- github.com/nextcloud/spreed/pull/6410mitrex_refsource_MISC
- hackerone.com/reports/1358977mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.