CVE-2020-8182

EPSS 1.0%CWE-284

Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves.

Produtos afetados

n/a · Nextcloud Deck

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://hackerone.com/reports/827816 https://nextcloud.com/security/advisory/?id=NC-SA-2020-025