Nextcloud · Report #2251074
Improper handling of request URLs in nextcloud/guests allows guest users to bypass app allowlist
Validstatus
mediumseverity
22upvotes
18 Jan 2024disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-v3qw-7vgv-2fxj
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.