Nextcloud · Report #1978882
User scoped external storage can be used to gather credentials of other users
Validstatus
highseverity
23upvotes
27 Jun 2023disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-637g-xp2c-qh5h
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.