CVE-2019-15620

2.7 lowEPSS 0.8%

Low (2.7) in nextcloud talk. EPSS 0.8% chance of exploitation in the next 30 days.

Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature.

Severity

CVSS 3.1

2.7 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2020-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nextcloud:talk

References

https://hackerone.com/reports/662218
https://nextcloud.com/security/advisory/?id=NC-SA-2020-011
https://hackerone.com/reports/662218
https://nextcloud.com/security/advisory/?id=NC-SA-2020-011

Check your stack JSON