Nextcloud · Report #177335
Content spoofing due to the improper behavior of the 403 page in Private Server
Validstatus
4upvotes
31 Oct 2016disclosed
Summary
@ahsantahir reported a content spoofing vulnerability on an internal server. We've fixed this by adjusting the Apache configuration.
On request of the reporter this is disclosed limitedly.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.