HexBrain

Nextcloud · Report #197877

User Information Disclosure via REST API

Validstatus
8upvotes
11 Feb 2017disclosed

How it was found

Hello, I found out that you are using WP 4.6.2 on your domain which is outdated.

https://nextcloud.com/readme.html

Description:- WordPress versions 4.7 and earlier are affected by multiple security issues. Kindly check https://wpvulndb.com/wordpresses/462 for the vulnerabilities and in detailed Proof of concept .

Fix: Upgrade WORDPRESS to 4.7.1

https://nextcloud.com/readme.html

Refer:-

https://wpvulndb.com/wordpresses/462

I hope this is fixed soon. Regards, Raunak

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original