Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2022/01/14 11:58 p.m.45 views

Nextcloud: Nextcloud Deck : Possibility for anyone to add a stack with existing tasks on anyone's board

Hi everyone, Hope you are well ! I found an IDOR vulnerability, allowing any user without privilege to add lists with tasks in any user board. This was tested on a Nextcloud Hub II server v23 with the Deck application in version 1.6.0. Steps To Reproduce: Beforehand: - Have an A user with a board...

4CVSS4.5AI score0.00937EPSS
SaveExploits1
Rows per page
Query Builder