Privilege escalation in Nextcloud Deck
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2021-39225 |
| CWE-ID | CWE-639 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
Deck Mobile applications / Apps for mobile phones |
| Vendor | Nextcloud |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
1) Authorization bypass through user-controlled key
EUVDB-ID: #VU57648
Risk: Medium
CVSSv3.1: 7.1 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-39225
CWE-ID:
CWE-639 - Authorization Bypass Through User-Controlled Key
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to escalate privileges on the system.
The vulnerability exists due to a missing permission check. A remote authenticated attacker can access Deck cards of another user.
MitigationInstall updates from vendor's website.
Vulnerable software versionsDeck: 1.2.0 - 1.5.2
External linkshttp://github.com/nextcloud/security-advisories/security/advisories/GHSA-2x96-38qg-3m72
http://github.com/nextcloud/deck/pull/3316
http://hackerone.com/reports/1331728
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to trick the victim to perform certain actions on the device.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
