Nextcloud · Report #213360
Content Spoofing/Text Injection in nextcloud.com
Validstatus
lowseverity
6upvotes
19 Apr 2017disclosed
How it was found
Greetings,
Hello Team,
I have found a Content Spoofing/Text Injection on this domain https://nextcloud.com
PoC URL: https://nextcloud.com/wp-content/cache/minify/%0d%0ahas%20moved%20to%20www.attacker.com.Please%20visit%20attacker.com%20present%20resource
PoC Screen Shot: {F168750}
Let me know if you need more information.
Cheers! Rey Mark Jerusha