CVE-2024-37883CWE-284

Nextcloud Deck can access comments and attachments of deleted cards

Medium · published June 14, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
30.9
In the wild
Unconfirmed
What it is

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A user with access to a deck board was able to access comments and attachments of already deleted cards. It is recommended that the Nextcloud Deck app is upgraded to 1.6.6 or 1.7.5 or 1.8.7 or 1.9.6 or 1.11.3 or 1.12.1.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00381 · 30.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-06-14T15:33Z
EPSS history
Timeline
  • 14 JUN 15:33Z
    Nextcloud Deck can access comments and attachments of deleted cards
    cvelistv5