Lucene search
PRIOn knowledge basePRION:CVE-2023-22471HistoryJan 14, 2023 - 1:15 a.m.
Improper access control
2023-01-1401:15:00
PRIOn knowledge base
www.prio-n.com
3
access control
nextcloud
attachment deletion
upgrade
Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Broken access control allows a user to delete attachments of other users. There are currently no known workarounds. It is recommended that the Nextcloud Deck app is upgraded to 1.6.5 or 1.7.3 or 1.8.2.
Related
nextcloud
nextcloud
Possibility to delete files attached to deck cards of other users
2023-01-09 05:47:55
cvelist
cvelist
CVE-2023-22471 Nextcloud Deck vulnerable to authorization bypass
2023-01-14 00:34:06
cve
cve
CVE-2023-22471
2023-01-14 01:15:14
osv
osv
CVE-2023-22471
2023-01-14 01:15:14
nvd
nvd
CVE-2023-22471
2023-01-14 01:15:14
hackerone
hackerone
Nextcloud: Possibility to delete files attached to deck cards of other users
2022-10-30 17:13:12