Nextcloud · Report #2115212
DNS pin middleware can be tricked into DNS rebinding allowing SSRF
Validstatus
mediumseverity
38upvotes
1 Jan 2024disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8f69-f9jg-4x3v
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.