Chat poll data can still be queried from API after purging history of a chat converstion
Low
nickvergessen
published
GHSA-c9hr-cq65-9mjwApr 17, 2023
Package
Talk
(Nextcloud)
Affected versions
>= 15.0.0
Patched versions
15.0.5
Description
Impact
A user that was added later to a conversation can use this information to get access to data that was deleted before they were added to the conversation.
Patches
It is recommended that the Nextcloud Talk is upgraded to 15.0.5
Impact
A user that was added later to a conversation can use this information to get access to data that was deleted before they were added to the conversation.
Patches
It is recommended that the Nextcloud Talk is upgraded to 15.0.5
Workarounds
References
For more information
If you have any questions or comments about this advisory: