PT-2022-11371 · Nextcloud · Nextcloud Talk

Ctulhu · Published 2022-03-08 · Updated 2022-03-15 · CVE-2021-41180

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Talk versions prior to 12.1.2

Description Nextcloud talk is a self-hosting messaging service. In affected versions, an attacker is able to control the link of a geolocation preview in the Nextcloud Talk application due to a lack of validation on the link. This could result in an open-redirect, but required user interaction. This only affected users of the Android Talk client.

Recommendations For versions prior to 12.1.2, it is recommended that the Nextcloud Talk App is upgraded to 12.1.2. As a temporary workaround, consider restricting the use of geolocation previews in the Nextcloud Talk application until a patch is available. Avoid using the geolocation preview feature in the affected Android Talk client until the issue is resolved.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2021-41180

GHSA-4FXR-MRW2-CQ92

Affected Products

Nextcloud Talk

References · 8

• 🔥 https://hackerone.com/reports/1337178 · Exploit
• https://github.com/nextcloud/spreed/pull/6239 · Patch
• https://osv.dev/vulnerability/CVE-2021-41180 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41180 · Security Note
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4fxr-mrw2-cq92 · Note
• https://t.me/cvenotify/27922 · Telegram Post
• https://t.me/cvenotify/27910 · Telegram Post
• https://t.me/cibsecurity/38544 · Telegram Post