Threats affecting pkg:github/nextcloud/spreed

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.5	EPSS 0.3%	CVE-2025-66556nextcloud security-advisories · Insecure Direct Object Reference Low3.5EPSS 0.3%2025-12-05CVE Database V5CVE-2025-66556 Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll drafts of other participants within the conversation based on their numeric ID. This vulnerability is fixed in 20.1.8 and 21.1.2. EPSS 0.3%Vulnerability CWE-639	CVE Database V5	2025-12-05

Page 1 of 1