Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves.
- https://hackerone.com/reports/827816
No PoCs found on GitHub currently.