CVE-2020-8297: Nextcloud Deck

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users with a duplicate user identifier to access deck data of a previous deleted user.

Affected products

• Nextcloud Deck: before 1.0.2 (fixed in 1.0.2)

Published 2021-02-23. Last modified 2026-06-17.