Description
Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A user with access to a deck board was able to access comments and attachments of already deleted cards. It is recommended that the Nextcloud Deck app is upgraded to 1.6.6 or 1.7.5 or 1.8.7 or 1.9.6 or 1.11.3 or 1.12.1.
Metrics
CVSS 3.1 4.3/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| nextcloud | security-advisories | >= 1.6.0, < 1.6.6; >= 1.7.0, < 1.7.5; >= 1.8.0, < 1.8.7; >= 1.9.0, < 1.9.6; >= 1.10.0, < 1.11.3; >= 1.11.0, < 1.12.1 |
References
- https://github.com/nextcloud/deck/pull/5423Patch
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x45g-vx69-r9m8Patch, Third Party Advisory
- https://hackerone.com/reports/2289333Issue Tracking
- https://github.com/nextcloud/deck/pull/5423Patch
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x45g-vx69-r9m8Patch, Third Party Advisory
- https://hackerone.com/reports/2289333Issue Tracking
Timeline
- Published
- Jun 14, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Modified