Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-37883

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A user with access to a deck board was able to access comments and attachments of already deleted cards. It is recommended that the Nextcloud Deck app is upgraded to 1.6.6 or 1.7.5 or 1.8.7 or 1.9.6 or 1.11.3 or 1.12.1.

Published

2024-06-14T16:15:13.107

Last Modified

2024-11-21T09:24:27.867

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-284
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nextcloud deck < 1.6.6 Yes
Application nextcloud deck < 1.7.5 Yes
Application nextcloud deck < 1.8.7 Yes
Application nextcloud deck < 1.9.6 Yes
Application nextcloud deck < 1.11.3 Yes
Application nextcloud deck 1.12.0 Yes
Application nextcloud deck 1.12.0 Yes
Application nextcloud deck 1.12.0 Yes
Application nextcloud deck 1.12.0 Yes
Application nextcloud deck 1.12.0 Yes
Application nextcloud deck 1.12.0 Yes
References