Nextcloud · Nextcloud Deck · CVE-2024-37883
**Name of the Vulnerable Software and Affected Versions**
Nextcloud Deck versions prior to 1.6.6
Nextcloud Deck versions prior to 1.7.5
Nextcloud Deck versions prior to 1.8.7
Nextcloud Deck versions prior to 1.9.6
Nextcloud Deck versions prior to 1.11.3
Nextcloud Deck versions prior to 1.12.1
**Description**
Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A user with access to a deck board was able to access comments and attachments of already deleted cards.
**Recommendations**
For versions prior to 1.6.6, upgrade to version 1.6.6 or later.
For versions prior to 1.7.5, upgrade to version 1.7.5 or later.
For versions prior to 1.8.7, upgrade to version 1.8.7 or later.
For versions prior to 1.9.6, upgrade to version 1.9.6 or later.
For versions prior to 1.11.3, upgrade to version 1.11.3 or later.
For versions prior to 1.12.1, upgrade to version 1.12.1 or later.