CVE-2023-22472

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. It is possible to make a user send any POST request with an arbitrary body given they click on a malicious deep link on a Windows computer. (e.g. in an email, chat link, etc). There are currently no known workarounds. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.2.

• CWE-352
• CWE-352

• https://github.com/nextcloud/desktop/pull/5106Patch, Third Party Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4gfv-xqpx-42qjThird Party Advisory
• https://github.com/nextcloud/desktop/pull/5106Patch, Third Party Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4gfv-xqpx-42qjThird Party Advisory

Published

Jan 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22467Luxon is a library for working with dates and times in JavaS…7.5
• CVE-2023-22468Discourse is an open source platform for community discussio…5.4
• CVE-2023-22469Deck is a kanban style organization tool aimed at personal p…3.5
• CVE-2023-2247In affected versions of Octopus Deploy it is possible to unm…5.3
• CVE-2023-22470Nextcloud Deck is a kanban style organization tool aimed at …6.5
• CVE-2023-22471Deck is a kanban style organization tool aimed at personal p…4.3
• CVE-2023-22473Talk-Android enables users to have video & audio calls throu…2.1
• CVE-2023-22474Parse Server is an open source backend that can be deployed …8.1
• CVE-2023-22475Canarytokens is an open source tool which helps track activi…6.1
• CVE-2023-22476Mantis Bug Tracker (MantisBT) is an open source issue tracke…4.3
• CVE-2023-22477Mercurius is a GraphQL adapter for Fastify. Any users of Mer…7.5
• CVE-2023-22478KubePi is a modern Kubernetes panel. The API interfaces with…7.5