CVE-2020-8235

4.3MEDIUM

Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.

发布于: 10/5/2020更新于: 11/21/2024

描述

Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.

AI分析AI驱动

受影响产品

nextclouddeck
1.0.4

参考资料