HexBrain

Nextcloud · Report #222805

Content (Text) Injection at https://nextcloud.com

Informativestatus
lowseverity
3upvotes
15 May 2017disclosed

How it was found

Hi, I may have found a Content(Text) Injection on this domain https://nextcloud.com

PoC:

https://nextcloud.com/federation/#[email protected] and please fill your account infomation in http://form.google.com/xasw

Let me know if you need more information.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original