CVE-2020-8235: Medium severity nextcloud deck vulnerability
Published Oct 5, 2020
·Updated
Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.
Affected Software
1 affected component
Nextcloud Deck=1.0.4
Event History
Oct 5, 2020
CVE Published
via MITRE·01:16 PM
Data Sourced
via MITRE·01:16 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-8235.
2
What is the severity level of CVE-2020-8235?
The severity level of CVE-2020-8235 is medium (4.3).
3
What is the cause of CVE-2020-8235 vulnerability?
The cause of CVE-2020-8235 vulnerability is missing access control in Nextcloud Deck 1.0.4.
4
What is the impact of CVE-2020-8235 vulnerability?
The impact of CVE-2020-8235 vulnerability is that it allows an attacker to view all attachments.
5
How can I fix CVE-2020-8235 vulnerability?
To fix CVE-2020-8235 vulnerability, you should update Nextcloud Deck to a version that includes the fix.