Nextcloud · Report #153251
[Nextcloud 9.0.53] Content Spoofing in 'trustDomain' parameter
Validstatus
1upvotes
5 Dec 2016disclosed
Summary
@ahsantahir reported a low severity content spoofing vulnerability in an administrative component. We've mitigated the issue as a hardening in our upcoming Nextcloud 11 release and would like to thank @ahsantahir for reporting this issue to us.
On request of the reporter this issue is only disclosed with limited visibility.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.