VULNERABILITY INTELLIGENCE
CVE-2022-24906
CVSS score3.5 LOW
EPSS probability1.08%
CISA KEVNot currently listed
Published2022-05-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Description
Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud, similar to Trello. The full path of the application is exposed to unauthorized users. It is recommended that the Nextcloud Deck app is upgraded to 1.2.11, 1.4.6, or 1.5.4. There is no workaround available.
Weakness classification
- security-advisories@github.com: CWE-200
- nvd@nist.gov: CWE-209
Primary references
- security-advisories@github.com — Issue Tracking, Patch, Third Party Advisory
- security-advisories@github.com — Exploit, Issue Tracking, Third Party Advisory
- security-advisories@github.com — Exploit, Issue Tracking, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory