CVE-2021-22913

—

CVSS 3.1

6.5 medium

EPSS

1%p70

Published

Jun 11, 2021 (Jun 11, 2021)

Modified

Jun 17, 2026

Description

Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless a global search has been explicitly chosen by the user.

Vendors: nextcloud
Products: deck
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.