CVE-2021-22913: Infoleak
Published Jun 11, 2021
·Updated
Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless a global search has been explicitly chosen by the user.
Affected Software
2 affected components
Nextcloud Deck<1.2.7
Nextcloud Deck>=1.3.0<1.4.1
Event History
Jun 11, 2021
CVE Published
via MITRE·03:49 PM
Data Sourced
via MITRE·03:49 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2021-22913.
2
What is the severity of CVE-2021-22913?
The severity of CVE-2021-22913 is medium.
3
What is the affected software?
The affected software is Nextcloud Deck before 1.2.7 and 1.4.1.
4
How does CVE-2021-22913 work?
CVE-2021-22913 allows information disclosure when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless a global search has been explicitly chosen by the user.
5
How can I fix CVE-2021-22913?
To fix CVE-2021-22913, update Nextcloud Deck to version 1.2.7 or higher.