DE
Product
Deck
18
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 15Low 1
Watch
Add Deck to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22470 | 6.5 | Jan 14 | Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud Affected: before 1.6.5; 1.7.0 before 1.7.3; 1.8.0 before 1.8.2 |
| CVE-2021-37631 | 6.5 | Sep 7 | Deck is an open source kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud Affected: before 1.2.9; 1.3.0 before 1.4.4; 1.5.0 before 1.5.1 |
| CVE-2021-22913 | 6.5 | Jun 11 | Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local… Affected: before 1.2.7; 1.3.0 before 1.4.1 |
| CVE-2025-66548 | 5.5 | Dec 5 | Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud Affected: before 1.12.7; 1.14.0 before 1.14.4; 1.15.0 before 1.15.1 |
| CVE-2024-22213 | 5.4 | Jan 18 | Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud Affected: 1.9.0 before 1.9.5; 1.10.0 before 1.11.2 |
| CVE-2019-15619 | 4.8 | Feb 4 | Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them… Affected: before 0.6.6 |
| CVE-2026-77170 | 4.3 | Sep 18 | The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage… Affected: 1.16.0 through 1.18.0 |
| CVE-2025-66557 | 4.3 | Dec 5 | Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud Affected: 1.14.0 before 1.14.6; 1.15.0 before 1.15.2 |
| CVE-2024-37883 | 4.3 | Jun 14 | Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud Affected: 1.6.0 before 1.6.6; 1.7.0 before 1.7.5; 1.8.0 before 1.8.7; 1.9.0 before 1.9.6; 1.11.0 before 1.11.3; 1.12.0; +5 more |
| CVE-2023-22471 | 4.3 | Jan 14 | Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud Affected: before 1.6.5; 1.7.0 before 1.7.3; 1.8.0 before 1.8.2 |
| CVE-2022-29159 | 4.3 | May 20 | Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud Affected: before 1.4.8; 1.5.0 before 1.5.6; 1.6.0 before 1.6.1 |
| CVE-2022-24906 | 4.3 | May 20 | Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud, similar to Trello Affected: before 1.2.11; 1.4.0 before 1.4.6; 1.5.0 before 1.5.4 |
| CVE-2020-8297 | 4.3 | Feb 23 | Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users with a duplicate user identifier to access deck data of a… Affected: before 1.0.2 |
| CVE-2020-8235 | 4.3 | Oct 5 | Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments Affected: 1.0.4 |
| CVE-2020-8179 | 4.1 | Jul 2 | Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks Affected: before 1.0.1 |
Showing 15