Medium severity4.8NVD Advisory· Published Dec 1, 2022· Updated Jun 17, 2026
CVE-2022-41971
CVE-2022-41971
Description
Nextcould Talk android is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.8, 13.0.10, 14.0.6, and 15.0.0, guests can continue to receive video streams from a call after being removed from a conversation. An attacker would be able to see videos on a call in a public conversation after being removed from that conversation, provided that they were removed while being in the call. Versions 12.2.8, 13.0.10, 14.0.6, and 15.0.0 contain patches for the issue. No known workarounds are available.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <12.2.8, <13.0.10, <14.0.6, <15.0.0
- nextcloud/security-advisoriesv5Range: < 12.2.8
Patches
Vulnerability mechanics
References
3- github.com/nextcloud/security-advisories/security/advisories/GHSA-wx6w-xpg9-6fv4nvdThird Party Advisory
- github.com/nextcloud/spreed/pull/7974nvdThird Party Advisory
- hackerone.com/reports/1706248nvdPermissions RequiredThird Party Advisory
News mentions
0No linked articles in our index yet.