CVE-2020-8179

2020-07-0219:15:12

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks.

CPENameOperatorVersion
deckeq0.4.1
deckeq0.5.1
deckeq0.3.1
deckeq0.8.0
deckeq0.4.0-beta5
deckeq0.2.2
deckeq0.6.2
deckeq0.1.2
deckeq0.4.0-beta3
deckeq0.3.0

Name	Operator	Version
deck	eq	0.4.1
deck	eq	0.5.1
deck	eq	0.3.1
deck	eq	0.8.0
deck	eq	0.4.0-beta5
deck	eq	0.2.2
deck	eq	0.6.2
deck	eq	0.1.2
deck	eq	0.4.0-beta3
deck	eq	0.3.0

Rows per page:

1-10 of 381

References

hackerone.com/reports/867052

nextcloud.com/security/advisory/?id=NC-SA-2020-022