Not rated
CVE-2020-8235 Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view…
Description
Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Nextcloud Deck app | Versions not published |