Nextcloud

Deck

15 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2020-8297

Exploit
  • EPSS 0.23%
  • Published 23.02.2021 19:15:13
  • Last modified 21.11.2024 05:38:40

Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users with a duplicate user identifier to access deck data of a previous deleted user.

8

CVE-2020-8182

Exploit
  • EPSS 0.21%
  • Published 05.10.2020 14:15:13
  • Last modified 21.11.2024 05:38:27

Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves.

4.3

CVE-2020-8235

Exploit
  • EPSS 0.14%
  • Published 05.10.2020 14:15:13
  • Last modified 21.11.2024 05:38:33

Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.

4.1

CVE-2020-8179

  • EPSS 0.14%
  • Published 02.07.2020 19:15:12
  • Last modified 21.11.2024 05:38:26

Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks.

4.8

CVE-2019-15619

  • EPSS 0.25%
  • Published 04.02.2020 20:15:12
  • Last modified 21.11.2024 04:29:08

Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in a project.