CVE-2023-22470: Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A database error…

PriorityP431medium6.5CVSS 3.1

AVNACLPRLUINSUCNINAH

EPSS

0.66%

47.1th percentile

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A database error can be generated potentially causing a DoS when performed multiple times. There are currently no known workarounds. It is recommended that the Nextcloud Server is upgraded to 1.6.5 or 1.7.3 or 1.8.2.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
nextcloud	deck	< 1.6.5	1.6.5
nextcloud	deck	>= 1.7.0 < 1.7.3	1.7.3
nextcloud	deck	>= 1.8.0 < 1.8.2	1.8.2
nextcloud	security-advisories	—	—
nextcloud	security-advisories	—	—
nextcloud	security-advisories	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.