4.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.0%
Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.
hackerone.com/reports/916704
nextcloud.com/security/advisory/?id=NC-SA-2020-036