First published: Tue Sep 07 2021(Updated: )
Credit: security-advisories@github.com
Affected Software | Affected Version | How to fix |
---|---|---|
Nextcloud Deck | <1.2.9 | |
Nextcloud Deck | >=1.3.0<1.4.4 | |
Nextcloud Deck | >=1.5.0<1.5.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-37631 is a vulnerability in the Deck application of Nextcloud, which allows unauthorized users to gain access to certain information.
CVE-2021-37631 affects Nextcloud Deck by allowing users to gain access to information they are not authorized to see.
CVE-2021-37631 has a severity score of 6.5 (medium).
To fix CVE-2021-37631, you should update Nextcloud Deck to a version beyond 1.5.1.
You can find more information about CVE-2021-37631 in the GitHub pull request, Nextcloud security advisories, and the HackerOne report linked in the references section.