Vulnerabilities > CVE-2023-22469 - Insecure Storage of Sensitive Information vulnerability in Nextcloud Deck

047910
CVSS 3.5 - LOW
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
nextcloud
CWE-922

Summary

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. When getting the reference preview for Deck cards the user has no access to, unauthorized user could eventually get the cached data of a user that has access. There are currently no known workarounds. It is recommended that the Nextcloud app Deck is upgraded to 1.8.2.

Vulnerable Configurations

Part Description Count
Application
Nextcloud
112

Common Weakness Enumeration (CWE)