VYPR
← All advisories
High severity8.1NVD Advisory· Published Oct 25, 2021· Updated Jun 17, 2026

CVE-2021-39225

CVE-2021-39225

Description

Nextcloud is an open-source, self-hosted productivity platform. A missing permission check in Nextcloud Deck before 1.2.9, 1.4.5 and 1.5.3 allows another authenticated users to access Deck cards of another user. It is recommended that the Nextcloud Deck App is upgraded to 1.2.9, 1.4.5 or 1.5.3. There are no known workarounds aside from upgrading.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • nextcloud/security-advisoriesv5
    Range: < 1.2.9
  • Nextcloud/Nextcloudllm-fuzzy
    Range: <1.2.9, <1.4.5, <1.5.3
  • Nextcloud/Deckllm-fuzzy2 versions
    <1.2.9, <1.4.5, <1.5.3+ 1 more
    • (no CPE)range: <1.2.9, <1.4.5, <1.5.3
    • cpe:2.3:a:nextcloud:deck:*:*:*:*:*:*:*:*range: <1.2.9

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.