PT-2022-16975

CVE-2022-24906

Published

2022-05-20

Updated

2023-07-06

Description by

CVSS 2.0

4.0

Medium

MetricsAV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Deck versions prior to 1.2.11 Nextcloud Deck versions prior to 1.4.6 Nextcloud Deck versions prior to 1.5.4

Description Nextcloud Deck is a Kanban-style project and personal management tool for Nextcloud, similar to Trello. The full path of the application is exposed to unauthorized users.

Recommendations For versions prior to 1.2.11, upgrade to 1.2.11. For versions prior to 1.4.6, upgrade to 1.4.6. For versions prior to 1.5.4, upgrade to 1.5.4.

Exploitability

Exploit

Fix

Impacts

Researchers

Ctulhu

Vendors

Affected products

Weakness enumeration

CWE-209: Generation of Error Message Containing Sensitive Information

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers