medium4.3
CVE-2020-8235
Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.
Impact
Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Deck | Version 1.0.4 |