Nextcloud Talk Poll Draft Deletion Vulnerability

A vulnerability in Nextcloud Talk versions 20.0.0 prior to 20.1.8 and 21.0.0 prior to 21.1.2 allows participants with chat permissions to delete poll drafts of other users within the same conversation. This was possible by referencing the numeric ID of the poll draft. The issue has been resolved in versions 20.1.8 and 21.1.2.

Impact

The vulnerability allows for unauthorized deletion of poll drafts, potentially disrupting ongoing discussions or poll activities.

Reproduction

To reproduce this vulnerability, a user with chat permissions can delete a poll draft belonging to another participant by using the numeric ID of the draft. This can be done within a conversation in Nextcloud Talk.

Remediation

Users are advised to update the Nextcloud Talk app to version 20.1.8 or 21.1.2.