Nextcloud · Report #1679267
Desktop client does not verify received singed certificate in end to end encryption
Validstatus
mediumseverity
$1,000bounty
13upvotes
27 Apr 2023disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h82x-98q3-7534
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.