CVE-2023-22471
Nextcloud Deck vulnerable to authorization bypass
概要
Nextcloud Deck vulnerable to authorization bypass
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Broken access control allows a user to delete attachments of other users. There are currently no known workarounds. It is recommended that the Nextcloud Deck app is upgraded to 1.6.5 or 1.7.3 or 1.8.2.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com