PT-2023-27173 · Nextcloud · Nextcloud Talk Android

Ch0Pin · Published 2023-08-10 · Updated 2023-08-16 · CVE-2023-39957

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nextcloud Talk Android versions prior to 17.0.0

Description Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android. An unprotected intent in versions prior to 17.0.0 allowed malicious third-party apps to trick the Talk Android app into writing files outside of its intended cache directory.

Recommendations For versions prior to 17.0.0, update to version 17.0.0 to resolve the issue. As a temporary workaround, consider restricting access to the app's cache directory until the update is applied.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-39957

GHSA-36F7-93F3-MCFJ

Affected Products

Nextcloud Talk Android

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39957.json · Exploit
• https://github.com/nextcloud/talk-android/pull/3064 · Patch
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-36f7-93f3-mcfj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39957 · Security Note
• https://osv.dev/vulnerability/CVE-2023-39957 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1689710879770583040 · Twitter Post
• https://t.me/cvenotify/56202 · Telegram Post
• https://hackerone.com/reports/1997029 · Note
• https://t.me/cibsecurity/68237 · Telegram Post