CVE-2021-37631

Name of the Vulnerable Software and Affected Versions Nextcloud Deck versions prior to 1.5.1 Nextcloud Deck versions prior to 1.4.4 Nextcloud Deck versions prior to 1.2.9

Description The Deck application didn't properly check membership of users in a Circle. This allowed other users in the instance to gain access to boards that have been shared with a Circle, even if the user was not a member of the circle.

Recommendations For versions prior to 1.5.1, upgrade to 1.5.1. For versions prior to 1.4.4, upgrade to 1.4.4. For versions prior to 1.2.9, upgrade to 1.2.9. If you are unable to update, disable the Deck plugin.