CVE-2019-15620

—

CVSS 3.1

2.7 low

EPSS

<1%p53

Published

Feb 4, 2020 (Feb 4, 2020)

Modified

Jun 17, 2026

Description

Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature.

Vendors: nextcloud
Products: talk
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.