CVE-2020-8235

4.3 mediumEPSS 0.8%

Medium (4.3) in nextcloud deck. EPSS 0.8% chance of exploitation in the next 30 days.

Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.

Severity

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2020-10-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19