https://xmpp.nextcloud.com///;@www.google.com allows open redirect

How it was found

Good day :)

Hope it goes well, an open redirect exists on the main xmpp.nextcloud.com domain allowing "bad hackers" to do bad things :)

Poc

https://xmpp.nextcloud.com///;@www.google.com

May you be well on your side of the screen :)

-Eric