PT-2021-22476
CVE-2021-39225
·
Published
2021-10-25
·
Updated
2022-04-25
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Nextcloud Deck versions prior to 1.2.9
Nextcloud Deck versions prior to 1.4.5
Nextcloud Deck versions prior to 1.5.3
Description
A missing permission check in Nextcloud Deck allows another authenticated user to access Deck cards of another user.
Recommendations
For Nextcloud Deck versions prior to 1.2.9, upgrade to version 1.2.9.
For Nextcloud Deck versions prior to 1.4.5, upgrade to version 1.4.5.
For Nextcloud Deck versions prior to 1.5.3, upgrade to version 1.5.3.
Found an issue in the description? Have something to add? Feel free to write us 👾