Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2023-26041 Details

Description

Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they were then hidden by the frontend code. It is recommended that the Nextcloud Talk is upgraded to 15.0.3. There are no workaround available.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j53p-r755-v4jf CVEVendor Advisory
https://github.com/nextcloud/spreed/pull/8515 CVEPatch
https://hackerone.com/reports/1784310 CVEExploitThird Party Advisory
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j53p-r755-v4jf [email protected]Vendor Advisory
https://github.com/nextcloud/spreed/pull/8515 [email protected]Patch

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-668Exposure of Resource to Wrong Sphere[email protected]
CWE-359Exposure of Private Personal Information to an Unauthorized Actor[email protected]

Affected Products

ProductVersions
nextcloud nextcloud talk
>= 15.0.0, < 15.0.3

CPE

  • cpe:2.3:a:nextcloud:nextcloud_talk:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2023-26041
NVD Published Date:
Feb 27, 2023
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2023-26041 Details - Not Deferred