HexBrain

Nextcloud · Report #222762

Clickjacking In https://demo.nextcloud.com

N/Astatus
criticalseverity
4upvotes
20 May 2017disclosed

How it was found

Hi Nextcloud,

Clickjacking In https://demo.nextcloud.com

This Is Zeeshan,An Ethical Hacker, I Have Found A Security Issue In Your Site

Clickjacking In nextcloud https://demo.nextcloud.com Page

<html> <head> <body> <p>Website is vulnerable to clickjacking!</p> <iframe src="https://demo.nextcloud.com" width="500" height="500"></iframe> </body> </html>

Please Fix It As Soon As Possible

Best Regards, Zeeshan Waheed [email protected]

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original