CVE-2020-8235CWE-639

Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments

published October 5, 2020

CVSS
—
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00781 · 55.5th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2020-10-05T13:16Z
EPSS history
Timeline
  • 05 OCT 13:16Z
    Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments
    cvelistv5