CVE-2021-32676

Name of the Vulnerable Software and Affected Versions Nextcloud Talk versions prior to 9.0.10 Nextcloud Talk versions prior to 10.0.8 Nextcloud Talk versions prior to 11.2.2

Description Nextcloud Talk is a fully on-premises audio/video and chat communication service. Password protected shared chats in Talk did not rotate the session cookie after a successful authentication event.

Recommendations For versions prior to 9.0.10, upgrade to version 9.0.10. For versions prior to 10.0.8, upgrade to version 10.0.8. For versions prior to 11.2.2, upgrade to version 11.2.2.