Lucene search
Divyesh PrajapatiNC-SA-2020-036HistoryJul 15, 2020 - 12:00 a.m.
Access control missing while viewing the attachments in the 'All boards' (NC-SA-2020-036)
2020-07-1500:00:00
Divyesh Prajapati
nextcloud.com
10
0.001 Low
EPSS
Percentile
25.0%
Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud deck | lt | 1.0.5 |
Related
osv
osv
CVE-2020-8235
2020-10-05 14:15:13
cvelist
cvelist
CVE-2020-8235
2020-10-05 13:16:08
hackerone
hackerone
cve
cve
CVE-2020-8235
2020-10-05 14:15:13
nvd
nvd
CVE-2020-8235
2020-10-05 14:15:13
prion
prion
Improper access control
2020-10-05 14:15:00