Non notée
CVE-2020-8297 Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users…
Description
Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users with a duplicate user identifier to access deck data of a previous deleted user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Nextcloud Deck | Versions non publiées |
Autres CVE de Nextcloud Deck
Les 4 CVE de Nextcloud Deck →
CVE-2021-22913
Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees…
Non notée
CVE-2020-8182
Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more…
Non notée
CVE-2020-8179
Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks
Non notée