Nextcloud · Report #1789602
Contacts only sanitizes PHOTO svg if mime type is all lower case
Validstatus
3upvotes
24 Jun 2023disclosed
Summary
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-hxr6-cx85-gcjx
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.