CVE-2021-22913 — Sensitive Information Exposure in Deck

CWE-200 — Sensitive Information Exposure2 documents2 sources
Severity
6.5MEDIUMNVD
EPSS
0.7%
top 29.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nextcloud Deck
Timeline
PublishedJun 11

Description

Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless a global search has been explicitly chosen by the user.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

▶NVDnextcloud/deck1.3.0 — 1.4.1+1

🔴Vulnerability Details

1
CVEList
CVE-2021-22913: Nextcloud Deck before 1↗2021-06-11
▶
CVE-2021-22913 — Sensitive Information Exposure in Deck | cvebase