CVE-2023-22473

 

Published at: - 09-01-2023 04:15

Last modified: - 13-01-2023 09:06

Total changes: - 2

Description

Talk-Android enables users to have video & audio calls through Nextcloud on Android. Due to passcode bypass, an attacker is able to access the user's Nextcloud files and view conversations. To exploit this the attacker needs to have physical access to the target's device. There are currently no known workarounds available. It is recommended that the Nextcloud Talk Android app is upgraded to 15.0.2.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

 

Verification logic

 

Reference

• https://github.com/nextcloud/talk-android/pull/2598
• https://hackerone.com/reports/1784645
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wvr4-gc4c-6vmx

 

Keywords

NVD

 

CVE-2023-22473

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures