Low severity3.5NVD Advisory· Published Apr 17, 2023· Updated Jun 17, 2026

CVE-2023-30540

Description

Nextcloud Talk is a chat, video & audio call extension for Nextcloud. In affected versions a user that was added later to a conversation can use this information to get access to data that was deleted before they were added to the conversation. This issue has been patched in version 15.0.5 and it is recommended that users upgrad to 15.0.5. There are no known workarounds for this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Talk
cpe:2.3:a:nextcloud:talk:*:*:*:*:*:*:*:*
Range: >=15.0.0,<15.0.5
Nextcloud/Nextcloudllm-fuzzy
Range: before 15.0.5
Nextcloud/security-advisoriescpe-rescue
Range: >= 15.0.0, < 15.0.5

Patches

Vulnerability mechanics

References

github.com/nextcloud/spreed/pull/8985nvdPatch
github.com/nextcloud/security-advisories/security/advisories/GHSA-c9hr-cq65-9mjwnvdVendor Advisory
hackerone.com/reports/1894676nvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000