A vulnerability was found in Nextcloud Talk up to 10.0.6/10.1.3/11.1.1 (Cloud Software). It has been rated as problematic. Affected by this issue is an unknown code of the component File Handler. Upgrading to version 10.0.7, 10.1.4, 11.1.2, 11.2.0 or 12.0.0 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.
Nextcloud Talk up to 10.0.6/10.1.3/11.1.1 File cross site scripting
- Virtual Patching
- November 18, 2021
- 11:10 am
Contact us to get started
CVE-2022-22486 : IBM TIVOLI WORKLOAD SCHEDULER 9.4/9.5/10.1 XML EXTERNAL ENTITY REFERENCE
Description IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when
CVE-2023-24997 : APACHE INLONG UP TO 1.5.0 DESERIALIZATION
Description Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0.
CVE-2022-37708 : DOCKER 20.10.15 BUILD FD82621 PERMISSION
Description Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside the Docker container can access any