HexBrain

Nextcloud · Report #145375

stats.nextcloud.com: Content Injection

Validstatus
4upvotes
17 Jul 2016disclosed

How it was found

Hello Team,

Found Same issue on Your Another Subdomain ,

Content injection :

https://stats.nextcloud.com/has%2f%20beed%20to%20https://www.ATTACKER.COM.%20so%20please%20visit%20https://www.ATTACKER.COM%20as%20your%20requested%20link

Though It is Not in a scope but Want to Make you aware of it :)

Thanks!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original