Security Advisory

CVE-2025-66556

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-05 17:56:44
Last updated 2025-12-05 18:09:34
Assigner GitHub_M
State PUBLISHED

Description

Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll drafts of other participants within the conversation based on their numeric ID. This vulnerability is fixed in 20.1.8 and 21.1.2.