CVE-2021-32676

    Dashboard / Vulnerabilities / CVE-2021-32676

    CVE-2021-32676

    Published: 16 Jun 2021Last Modified: 7 Aug 2026

    Summary:

    Details: Nextcloud Talk is a fully on-premises audio/video and chat communication service. Password protected shared chats in Talk before version 9.0.10, 10.0.8 and 11.2.2 did not rotate the session cookie after a successful authentication event. It is recommended that the Nextcloud Talk App is upgraded to 9.0.10, 10.0.8 or 11.2.2. No workarounds for this vulnerability are known to exist.

    References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p6h7-84v4-827r, https://hackerone.com/reports/1181962

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -f8056c61469400eb16094902d268fb93575ce8de

    Affected versions

    v10.0.7
    v10.0.6
    v10.0.5
    v10.0.4
    v10.0.3
    v10.0.2
    v10.0.1
    v10.0.0
    v10.0.0-rc.1
    v10.0.0-beta.2
    v10.0.0-beta.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-32676 | CVE-DB