| Package | Affected versions | Patched versions |
|---|---|---|
| talk | ≥ 7.0.0, < 7.0.3≥ 8.0.0, < 8.0.8< 6.0.5 | 7.0.38.0.86.0.5 |
A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free