Vulnerabilities > CVE-2020-8182 - Improper Preservation of Permissions vulnerability in Nextcloud Deck 0.8.0

047910
CVSS 8.0 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
nextcloud
CWE-281

Summary

Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves.

Vulnerable Configurations

Part Description Count
Application
Nextcloud
1

Common Weakness Enumeration (CWE)