CVE-2021-32689

Name of the Vulnerable Software and Affected Versions Nextcloud Talk versions prior to 11.2.2 Nextcloud Talk versions prior to 11.3.0 can be simplified to the above, as versions prior to 11.2.2 already include versions prior to 11.3.0. Therefore, the simplified version is: Nextcloud Talk versions prior to 11.2.2

Description The issue allows a user to access any chat message sent to a previous user with a reused username. This can happen if a user is able to reuse an earlier used username.

Recommendations For versions prior to 11.2.2, update to version 11.2.2 or later to resolve the issue. As a temporary workaround, do not allow users to choose usernames themselves, to minimize the risk of exploitation.