Description
Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Deck | Fixed in 0.8.1 | — |
Published Oct 5, 2020 · Updated Aug 4, 2024 · Assigned by hackerone
Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves.
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Deck | Fixed in 0.8.1 | — |