CVE-2023-22471CWE-639

Nextcloud Deck vulnerable to authorization bypass

Low · published January 14, 2023

CVSS v3.1
3.5
EPSS
1%
Percentile
43.6
In the wild
Unconfirmed
What it is

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Broken access control allows a user to delete attachments of other users. There are currently no known workarounds. It is recommended that the Nextcloud Deck app is upgraded to 1.6.5 or 1.7.3 or 1.8.2.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00524 · 43.6th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2023-01-14T00:34Z
EPSS history
Timeline
  • 14 JAN 00:34Z
    Nextcloud Deck vulnerable to authorization bypass
    cvelistv5