Nextcloud · Report #1241460
ApiService#fetch serves content as text/html and inline Content-Disposition
Validstatus
6upvotes
11 Aug 2021disclosed
How it was found
Impact
XSS
This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original