Information Disclosure Vulnerability in Nextcloud Deck by Nextcloud

CVE-2021-22913

What is CVE-2021-22913?

Nextcloud Deck versions prior to 1.2.7 and 1.4.1 are susceptible to an information disclosure vulnerability. This occurs when the application defaults to searching for sharees using the lookup server instead of restricting this search to the local Nextcloud server. Unless users explicitly select a global search option, sensitive information may inadvertently be exposed, potentially compromising user privacy and data security. To mitigate this vulnerability, users are advised to update to the latest versions and carefully review their search settings.

References