Nextcloud Deck Access Control Error Vulnerability (CNVD-2021-102877)

Nextcloud is an open source set of self-hosted file synchronization and sharing communication applications platform from Germany-based Nextcloud. Nextcloud Deck is vulnerable to an access control error in versions prior to 1.2.9, 1.4.5 and 1.5.3. The vulnerability stems from a lack of permission checking in Nextcloud Deck, where other authenticated user accesses another user’s card. No details of the vulnerability are currently available.