CVE-2023-45149

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Nextcloud talk is a chat module for the Nextcloud server platform. In affected versions brute force protection of public talk conversation passwords can be bypassed, as there was an endpoint validating the conversation password without registering bruteforce attempts. It is recommended that the Nextcloud Talk app is upgraded to 15.0.8, 16.0.6 or 17.1.1. There are no known workarounds for this vulnerability.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-307

Affected software

Vendor	Product	Versions
nextcloud	security-advisories	>= 15.0.0, < 15.0.8; >= 16.0.0, < 16.0.6; >= 17.0.0, < 17.1.1

References

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7rf8-pqmj-rpqvVendor Advisory
https://github.com/nextcloud/spreed/pull/10545Issue Tracking, Patch
https://hackerone.com/reports/2094473Permissions Required
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7rf8-pqmj-rpqvVendor Advisory
https://github.com/nextcloud/spreed/pull/10545Issue Tracking, Patch
https://hackerone.com/reports/2094473Permissions Required

Timeline

Published: Oct 16, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-45155.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request size In commit 2b9b8f3b68ed ("ksmbd: v CVE-2023-451504.3Nextcloud calendar is a calendar app for the Nextcloud server platform. Due to missing precondition checks the server was trying to validate CVE-2023-451518.8Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an att CVE-2023-451522.3Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it possible to perform a CVE-2023-451589.8An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for loggi CVE-2023-451598.41E Client installer can perform arbitrary file deletion on protected files. A non-privileged user could provide a symbolic link or Window CVE-2023-45167.8A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to CVE-2023-451608.8In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to substitute a harmfu CVE-2023-451617.2The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate CVE-2023-451629.8Affected 1E Platform versions have a Blind SQL Injection vulnerability that can lead to arbitrary code execution. Application of the relev CVE-2023-451637.2The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate CVE-2023-451655.5IBM AIX 7.2 and 7.3 could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service.