Nextcloud · Report #152925
Content spoofing in cloud.nextcloud.com
Validstatus
2upvotes
30 Aug 2016disclosed
Summary
@ahsantahir reported a content spoofing vulnerability in cloud.nextcloud.com caused by it's Apache configuration. This has been changed by adding the following to the Apache config:
ErrorDocument 404 "File not
ErrorDocument 403 "Access forbidden."
On request of the reporter, this issue is only disclosed limitedly.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.