critical9.9
CVE-2020-8180
A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator.
Impact
A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Talk | before 6.0.5 from 7.0.0 before 7.0.3 from 8.0.0 before 8.0.8 |