PT-2021-22476
CVE-2021-39225
·
تاريخ النشر
2021-10-25
·
تاريخ التحديث
2022-04-25
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Nextcloud Deck versions prior to 1.2.9
Nextcloud Deck versions prior to 1.4.5
Nextcloud Deck versions prior to 1.5.3
Description
A missing permission check in Nextcloud Deck allows another authenticated user to access Deck cards of another user.
Recommendations
For Nextcloud Deck versions prior to 1.2.9, upgrade to version 1.2.9.
For Nextcloud Deck versions prior to 1.4.5, upgrade to version 1.4.5.
For Nextcloud Deck versions prior to 1.5.3, upgrade to version 1.5.3.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾