Approved changes feed: RSS · Atom

cpe:2.3:a:nextcloud:deck:1.12.0:beta1:*:*:*:*:*:*

part: a version: 1.12.0 update: beta1

VendorNextcloud (e5ae4298-6932-564f-a40d-08cebea039a5)
ProductDeck (303a4a3f-0c5f-5b20-b12d-bb61da800050)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/nextcloud/deck purl2cpe 2026-06-01 10:17:59.339584

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37883 vulnerable 2026-06-03 14:56:07.251482 Nextcloud Deck can access comments and attachments of deleted cards
MEDIUM (4.3)
Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A user with access to a deck board was able to access comments and attachments of already deleted cards. It is recommended that the Nextcloud Deck app is upgraded to 1.6.6 or 1.7.5 or 1.8.7 or 1.9.6 or 1.11.3 or 1.12.1.
Published: 2024-06-14T15:33:18.525Z
Updated: 2024-08-02T03:57:39.902Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.