CVE-2023-39957

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-39957
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39957.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-39957
Aliases
  • GHSA-36f7-93f3-mcfj
Published
2023-08-10T15:04:16.233Z
Modified
2026-08-12T03:51:36.931575174Z
Severity
  • 7.2 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Path traversal allows tricking the Talk Android app into writing files into it's root directory
Details

Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android. Prior to version 17.0.0, an unprotected intend allowed malicious third party apps to trick the Talk Android app into writing files outside of its intended cache directory. Nextcloud Talk Android version 17.0.0 has a patch for this issue. No known workarounds are available.

Database specific 
{
    "cwe_ids": [
        "CWE-22"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39957.json"
}
References

Affected packages

Git / github.com/nextcloud/spreed

Affected ranges

Type
GIT
Repo
https://github.com/nextcloud/spreed
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
efe34dacf66f4f36b5d47eb92632f4b1d2aab7cd
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:nextcloud:talk:*:*:*:*:*:android:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "17.0.0"
        }
    ]
}
Type
GIT
Repo
https://github.com/nextcloud/talk-android
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
920e441960fb103e040a5d1ae2da1626ed5b8b83
Introduced
b08beeadce65938ac3463c5a027274e785d4ae10
Last affected
7b345eff285243b4a811521e3c8fb69f277ab4fb
Database specific
Show details 
{
    "cpe": [
        "cpe:2.3:a:nextcloud:talk:*:*:*:*:*:android:*:*",
        "cpe:2.3:a:nextcloud:talk:17.0.0:rc1:*:*:*:android:*:*",
        "cpe:2.3:a:nextcloud:talk:17.0.0:rc2:*:*:*:android:*:*",
        "cpe:2.3:a:nextcloud:talk:17.0.0:rc3:*:*:*:android:*:*"
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "17.0.0"
        },
        {
            "introduced": "17.0.0-rc1"
        },
        {
            "last_affected": "17.0.0-rc1"
        },
        {
            "introduced": "17.0.0-rc2"
        },
        {
            "last_affected": "17.0.0-rc2"
        },
        {
            "introduced": "17.0.0-rc3"
        },
        {
            "last_affected": "17.0.0-rc3"
        }
    ]
}

Affected versions

17.*
17.0.0-rc1
17.0.0-rc2
17.0.0-rc3
v1.*
v1.0.21
v1.0.22
v1.1.2
v1.2
v10.*
v10.0.0-beta.1
v10.0.0-beta.2
v10.0.0-rc.1
v11.*
v11.0.0-alpha.1
v11.0.0-alpha.2
v11.0.0-alpha.3
v11.0.0-alpha.4
v12.*
v12.0.0-alpha.1
v12.0.0-alpha.2
v12.0.0-alpha.3
v14.*
v14.0.0-beta.1
v14.0.0-rc.1
v15.*
v15.0.0-beta.1
v15.0.0-beta.2
v15.0.0-beta.3
v15.0.0-beta.4
v16.*
v16.0.0-beta.1
v16.0.0-beta.2
v16.0.0-rc.1
v17.*
v17.0.0-beta.1
v17.0.0-beta.2
v17.0.0-beta.3
v17.0.0-rc.1
v17.0.0-rc.2
v17.0.0-rc.3
v17.0.0-rc.4
v17.0.0rc1
v17.0.0rc2
v17.0.0rc3
v17.0.0rc4
v2.*
v2.0.0
v2.9.0
v2.9.1
v3.*
v3.0.0
v3.0.1
v3.99.10
v3.99.11
v3.99.12
v3.99.8
v4.*
v4.0.0
v4.99.5
v5.*
v5.99.10
v6.*
v6.0.0-rc.1
v6.0.0-rc.2
v7.*
v7.0.0-beta.1
v8.*
v8.0.0
v8.0.0-alpha.1
v8.0.0-alpha.2
v8.0.0-alpha.3
v8.0.0-alpha.4
v8.0.0-alpha.5
v8.0.0-alpha.6
v9.*
v9.0.0-beta.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39957.json"