CVE-2020-8235
First published: Mon Oct 05 2020(Updated: )
Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nextcloud Deck | =1.0.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-8235.
What is the severity level of CVE-2020-8235?
The severity level of CVE-2020-8235 is medium (4.3).
What is the cause of CVE-2020-8235 vulnerability?
The cause of CVE-2020-8235 vulnerability is missing access control in Nextcloud Deck 1.0.4.
What is the impact of CVE-2020-8235 vulnerability?
The impact of CVE-2020-8235 vulnerability is that it allows an attacker to view all attachments.
How can I fix CVE-2020-8235 vulnerability?
To fix CVE-2020-8235 vulnerability, you should update Nextcloud Deck to a version that includes the fix.
- collector/nvd-index
- vendor/nextcloud
- canonical/nextcloud deck
- version/nextcloud deck/1.0.4