CVE-2024-37883

published 2024-06-14

CVE-2024-37883: Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A user with access…

Priority P4 21 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A user with access to a deck board was able to access comments and attachments of already deleted cards. It is recommended that the Nextcloud Deck app is upgraded to 1.6.6 or 1.7.5 or 1.8.7 or 1.9.6 or 1.11.3 or 1.12.1.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
nextcloud	deck	—	—
nextcloud	deck	>= 1.11.0 < 1.11.3	1.11.3
nextcloud	deck	>= 1.6.0 < 1.6.6	1.6.6
nextcloud	deck	>= 1.7.0 < 1.7.5	1.7.5
nextcloud	deck	>= 1.8.0 < 1.8.7	1.8.7
nextcloud	deck	>= 1.9.0 < 1.9.6	1.9.6
nextcloud	security-advisories	—	—
nextcloud	security-advisories	—	—
nextcloud	security-advisories	—	—
nextcloud	security-advisories	—	—
nextcloud	security-advisories	—	—
nextcloud	security-advisories	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284