Lucene search
HackeroneCVELIST:CVE-2020-8235HistoryOct 05, 2020 - 1:16 p.m.
CVE-2020-8235
2020-10-0513:16:08
CWE-639
hackerone
www.cve.org
4
nextcloud
deck
access control
vulnerability
attachments
insecure direct object reference
Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.
CNA Affected
[
{
"product": "Nextcloud Deck app",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Fixed in 1.0.5"
}
]
}
]Related
hackerone
hackerone
nvd
nvd
CVE-2020-8235
2020-10-05 14:15:13
cve
cve
CVE-2020-8235
2020-10-05 14:15:13
prion
prion
Improper access control
2020-10-05 14:15:00
osv
osv
CVE-2020-8235
2020-10-05 14:15:13
nextcloud
nextcloud