What the vulnerability does

01Description

Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves.

Key dates

02Disclosure timeline

October 5, 2020 CVE published
August 4, 2024 Record updated