CVE-2022-24906

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud, similar to Trello. The full path of the application is exposed to unauthorized users. It is recommended that the Nextcloud Deck app is upgraded to 1.2.11, 1.4.6, or 1.5.4. There is no workaround available.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200CWE-209

Affected software

No affected versions have been published.

Timeline

Published
May 20, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-249077.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaCVE-2022-249087.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaCVE-2022-24918.8A vulnerability has been found in SourceCodester Library Management System 1.0 and classified as critical. This vulnerability affects unknowCVE-2022-249106.7A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4. A specially-cCVE-2022-249127.5The package github.com/runatlantis/atlantis/server/controllers/events before 0.19.7 are vulnerable to Timing Attack in the webhook event valCVE-2022-249135.5Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProviderCVE-2022-249158.8The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code CVE-2022-249167.5Optimism before @eth-optimism/l2geth@0.5.11 allows economic griefing because a balance is duplicated upon contract self-destruction.CVE-2022-249174.4An authenticated user can create a link with reflected Javascript code inside it for services’ page and send it to other users. The payload CVE-2022-249184.4An authenticated user can create a link with reflected Javascript code inside it for items’ page and send it to other users. The payload canCVE-2022-249194.4An authenticated user can create a link with reflected Javascript code inside it for graphs’ page and send it to other users. The payload caCVE-2022-24928.8A vulnerability was found in SourceCodester Library Management System 1.0 and classified as critical. This issue affects some unknown proces
CVE-2022-24906: Medium severity, CVSS 4.3 | Vulnix