CVE-2023-22471

published 2023-01-14

CVE-2023-22471: Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Broken access control allows…

Priority P4 20 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C N I N A L

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Broken access control allows a user to delete attachments of other users. There are currently no known workarounds. It is recommended that the Nextcloud Deck app is upgraded to 1.6.5 or 1.7.3 or 1.8.2.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
nextcloud	deck	< 1.6.5	1.6.5
nextcloud	deck	>= 1.7.0 < 1.7.3	1.7.3
nextcloud	deck	>= 1.8.0 < 1.8.2	1.8.2
nextcloud	security-advisories	—	—
nextcloud	security-advisories	—	—
nextcloud	security-advisories	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-639