| Package | Affected versions | Patched versions |
|---|---|---|
| deck | = 1.0.4 |
Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free