Nextcloud · Report #2250398
Non-admin users can reset app allowlist to the default
Validstatus
mediumseverity
28upvotes
18 Jan 2024disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.