Missing access control in Nextcloud Deck 1.0.4, insecure direct object reference allowing attacker to view all attachment
Reporter | Title | Published | Views | Family All 6 |
---|---|---|---|---|
![]() | Improper access control | 5 Oct 202014:15 | – | prion |
![]() | Nextcloud: Access control missing while viewing the attachments in the "All boards" | 6 Jul 202013:35 | – | hackerone |
![]() | CVE-2020-8235 | 5 Oct 202014:15 | – | cve |
![]() | Access control missing while viewing the attachments in the 'All boards' (NC-SA-2020-036) | 15 Jul 202000:00 | – | nextcloud |
![]() | CVE-2020-8235 | 5 Oct 202014:15 | – | osv |
![]() | CVE-2020-8235 | 5 Oct 202013:16 | – | cvelist |
Source | Link |
---|---|
hackerone | www.hackerone.com/reports/916704 |
nextcloud | www.nextcloud.com/security/advisory/ |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo