Nextcloud · Report #2457588
Event create can create attachments that link to other websites
Validstatus
mediumseverity
$250bounty
25upvotes
14 Jul 2024disclosed
Summary
Advisory here: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2r7q-vfmv-79qf
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.