{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T14:08:11.204","vulnerabilities":[{"cve":{"id":"CVE-2022-41971","sourceIdentifier":"security-advisories@github.com","published":"2022-12-01T21:15:19.833","lastModified":"2026-06-17T05:04:09.657","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Nextcould Talk android is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.8, 13.0.10, 14.0.6, and 15.0.0, guests can continue to receive video streams from a call after being removed from a conversation. An attacker would be able to see videos on a call in a public conversation after being removed from that conversation, provided that they were removed while being in the call. Versions 12.2.8, 13.0.10, 14.0.6, and 15.0.0 contain patches for the issue. No known workarounds are available."},{"lang":"es","value":"Nextcould Talk Android es una aplicación de videoconferencia y audioconferencia para Nextcloud. Antes de las versiones 12.2.8, 13.0.10, 14.0.6 y 15.0.0, los invitados pueden continuar recibiendo transmisiones de video de una llamada después de ser eliminados de una conversación. Un atacante podría ver vídeos en una llamada en una conversación pública después de ser eliminado de esa conversación, siempre que se eliminaran mientras estaba en la llamada. Las versiones 12.2.8, 13.0.10, 14.0.6 y 15.0.0 contienen parches para el problema. No hay workarounds disponibles."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"nextcloud","product":"security-advisories","versions":[{"version":"< 12.2.8","status":"affected"},{"version":">= 13.0.0, < 13.0.10","status":"affected"},{"version":">= 14.0.0, < 14.0.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:53:18.133294Z","id":"CVE-2022-41971","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-359"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-668"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud_talk:*:*:*:*:*:android:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.2.8","matchCriteriaId":"2484A9FA-E96C-4E38-9BE5-8704E4B5288C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud_talk:*:*:*:*:*:android:*:*","versionStartIncluding":"13.0.0","versionEndExcluding":"13.0.10","matchCriteriaId":"F9037B28-B345-40C5-9553-7B9E039533C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:nextcloud_talk:*:*:*:*:*:android:*:*","versionStartIncluding":"14.0.0","versionEndExcluding":"14.0.6","matchCriteriaId":"395BB21A-B358-4E2E-BD78-6E24EA159729"}]}]}],"references":[{"url":"https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wx6w-xpg9-6fv4","source":"security-advisories@github.com","tags":["Third Party Advisory"]},{"url":"https://github.com/nextcloud/spreed/pull/7974","source":"security-advisories@github.com","tags":["Third Party Advisory"]},{"url":"https://hackerone.com/reports/1706248","source":"security-advisories@github.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wx6w-xpg9-6fv4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/nextcloud/spreed/pull/7974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://hackerone.com/reports/1706248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]}]}}]}