CVE-2023-22470

2023-01-1401:15:13

Google

osv.dev

nextcloud deck

kanban style

organization tool

dos vulnerability

nextcloud server

upgrade

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.9%

JSON

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A database error can be generated potentially causing a DoS when performed multiple times. There are currently no known workarounds. It is recommended that the Nextcloud Server is upgraded to 1.6.5 or 1.7.3 or 1.8.2.

CPENameOperatorVersion
deckeq1.2.1
deckeq0.5.0
deckeq0.1.4
deckeq0.6.0-beta1
deckeq0.6.6
deckeq0.7.0
deckeq0.8.0
deckeq0.6.5
deckeq1.0.0-beta2
deckeq1.2.2