Messages can still be seen on conversation after expiring when cron is misconfigured
Low
nickvergessen
published
GHSA-j53p-r755-v4jfFeb 27, 2023
Package
Talk
(Nextcloud)
Affected versions
>= 15.0.0
Patched versions
15.0.3
Description
Impact
When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they were then hidden by the frontend code.
Patches
It is recommended that the Nextcloud Talk is upgraded to 15.0.3
Impact
When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they were then hidden by the frontend code.
Patches
It is recommended that the Nextcloud Talk is upgraded to 15.0.3
Workarounds
References
For more information
If you have any questions or comments about this advisory: