Nextcloud · Report #1153138
Improper input-size validation on the user new session name can result in server-side DDoS.
Validstatus
mediumseverity
10upvotes
31 May 2022disclosed
Summary
Advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7cwm-qph5-4h5w
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.