Information Disclosure Vulnerability in Nextcloud Deck by Nextcloud

CVE-2021-22913

What is CVE-2021-22913?

Nextcloud Deck versions prior to 1.2.7 and 1.4.1 are susceptible to an information disclosure vulnerability. This occurs when the application defaults to searching for sharees using the lookup server instead of restricting this search to the local Nextcloud server. Unless users explicitly select a global search option, sensitive information may inadvertently be exposed, potentially compromising user privacy and data security. To mitigate this vulnerability, users are advised to update to the latest versions and carefully review their search settings.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References