CVE-2021-22913CWE-200

Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead…

published June 11, 2021

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless a global search has been explicitly chosen by the user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01368 · 71.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2021-06-11T15:49Z
EPSS history
Timeline
  • 11 JUN 15:49Z
    Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead…
    cvelistv5