CVE-2022-35932

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Nextcloud Talk is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.7, 13.0.7, and 14.0.3, password protected conversations are susceptible to brute force attacks if the attacker has the link/conversation token. It is recommended that the Nextcloud Talk application is upgraded to 12.2.7, 13.0.7 or 14.0.3. There are currently no known workarounds available apart from not having password protected conversations.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-359CWE-307

Affected software

VendorProductVersions
nextcloudsecurity-advisories>= 12.2.0, < 12.2.7; >= 13.0.0, < 13.0.7; >= 14.0.0, < 14.0.3

References

Timeline

Published
Aug 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-359336.1This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could sCVE-2022-359347.5TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is vulnerable to a denial of sCVE-2022-359357.5TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHECVE-2022-359365.3Ethermint is an Ethereum library. In Ethermint running versions before `v0.17.2`, the contract `selfdestruct` invocation permanently removesCVE-2022-359379.1TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and oCVE-2022-359389.1TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and oCVE-2022-359399.8TensorFlow is an open source platform for machine learning. The `ScatterNd` function takes an input argument that determines the indices of CVE-2022-35945.3A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callbackCVE-2022-359407.5TensorFlow is an open source platform for machine learning. The `RaggedRangOp` function takes an argument `limits` that is eventually used tCVE-2022-359417.5TensorFlow is an open source platform for machine learning. The `AvgPoolOp` function takes an argument `ksize` that must be positive but is CVE-2022-3594210.0Improper input validation on the `contains` LoopBack filter may allow for arbitrary SQL injection. When the extended filter property `contaiCVE-2022-359438.8Shield is an authentication and authorization framework for CodeIgniter 4. This vulnerability may allow [SameSite Attackers](https://canitak
CVE-2022-35932: Medium severity, CVSS 5.3 | Vulnix