Deck@* Security Vulnerabilities and Issues — Deck@* CVE List

Lucene search

NextcloudDeck*

3 matches found

CVE•added 2020/02/04 8:15 p.m.•51 views

CVE-2019-15619

Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in a project.

4.8CVSS5AI score0.0025EPSS

CVE•added 2020/07/02 7:15 p.m.•43 views

CVE-2020-8179

Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks.

4.1CVSS4.3AI score0.00135EPSS

CVE•added 2020/10/05 2:15 p.m.•35 views

CVE-2020-8182

Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves.

8CVSS7.7AI score0.0021EPSS