Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2023-22470

Nextcloud Deck vulnerable to uncontrolled resource consumption

Description

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A database error can be generated potentially causing a DoS when performed multiple times. There are currently no known workarounds. It is recommended that the Nextcloud Server is upgraded to 1.6.5 or 1.7.3 or 1.8.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nextcloud security-advisories

  • >= 1.6.0, < 1.6.5affected
  • >= 1.7.0, < 1.7.3affected
  • >= 1.8.0, < 1.8.2affected

References