Lucene search

K
osvGoogleOSV:CVE-2022-24906
HistoryMay 20, 2022 - 4:15 p.m.

CVE-2022-24906

2022-05-2016:15:09
Google
osv.dev
7
nextcloud
deck
application path
unauthorized users
upgrade
software
cve-2022-24906

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

35.3%

Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud, similar to Trello. The full path of the application is exposed to unauthorized users. It is recommended that the Nextcloud Deck app is upgraded to 1.2.11, 1.4.6, or 1.5.4. There is no workaround available.

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

35.3%

Related for OSV:CVE-2022-24906