PT-2022-16975

CVE-2022-24906

تاريخ النشر

2022-05-20

تاريخ التحديث

2023-07-06

الوصف من

CVSS 2.0

4.0

متوسطة

المقاييسAV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Deck versions prior to 1.2.11 Nextcloud Deck versions prior to 1.4.6 Nextcloud Deck versions prior to 1.5.4

Description Nextcloud Deck is a Kanban-style project and personal management tool for Nextcloud, similar to Trello. The full path of the application is exposed to unauthorized users.

Recommendations For versions prior to 1.2.11, upgrade to 1.2.11. For versions prior to 1.4.6, upgrade to 1.4.6. For versions prior to 1.5.4, upgrade to 1.5.4.

قابلية الاستغلال

استغلال

إصلاح

التأثيرات

الباحثون

Ctulhu

المورّدون

المنتجات المتأثرة

تصنيف نقاط الضعف

CWE-209: Generation of Error Message Containing Sensitive Information

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

المعرّفات ذات الصلة