Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature.
- https://hackerone.com/reports/662218
No PoCs found on GitHub currently.