Low severity3.5NVD Advisory· Published May 20, 2022· Updated Jun 17, 2026

CVE-2022-24906

Description

Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud, similar to Trello. The full path of the application is exposed to unauthorized users. It is recommended that the Nextcloud Deck app is upgraded to 1.2.11, 1.4.6, or 1.5.4. There is no workaround available.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Deck2 versions
cpe:2.3:a:nextcloud:deck:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nextcloud:deck:*:*:*:*:*:*:*:*range: <1.2.11
- (no CPE)range: 1.2.11, 1.4.6, or 1.5.4
nextcloud/security-advisoriesv5
Range: < 1.2.11

Patches

Vulnerability mechanics

References

github.com/nextcloud/deck/pull/3384nvdIssue TrackingPatchThird Party Advisory
github.com/nextcloud/security-advisories/security/advisories/GHSA-hx9w-xfrg-2qvpnvdExploitIssue TrackingThird Party Advisory
hackerone.com/reports/1354334nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000