CVE-2020-8179 Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks

Description

Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks.

Affected products and versions

Product	Affected versions	Fixed in
Nextcloud Deck	Versions not published

Other CVEs of Nextcloud Deck

The 4 CVEs of Nextcloud Deck →

CVE-2021-22913 Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees… Not rated CVE-2020-8297 Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users… Not rated CVE-2020-8182 Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more… Not rated