CVE-2025-66557 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1.14.6 and…
Medium CVSS: 5.4

CVE-2025-66557

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1.14.6 and 1.15.2, a bug in the permission logic allowed users with "Can share" permission to modify the permissions of other recipients. This vulnerability is fixed in 1.14.6 and 1.15.2.
Vendor
Nextcloud
Product
Deck
CWE
CWE-284
Yayın Tarihi
2025-12-05 18:15:58
Güncelleme
2025-12-09 16:46:17
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-284 Deck MEDIUM Nextcloud 2025

Referanslar

https://github.com/nextcloud/deck/commit/f1da8b30a455f02373d44154da04494c949a95ae https://github.com/nextcloud/deck/pull/7131 https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wwr8-hx9g-rjvv https://hackerone.com/reports/3247499