Content Injection - apps.nextcloud.com

How it was found

Hi there,

The following URL: https://apps.nextcloud.com/.htacess%20Content%20Injection%20test is vulnerable to Content Injection. Reference: https://www.owasp.org/index.php/Content_Spoofing You should use a 403 Forbidden page. If you need further information, let me know.

Thanks!