Nextcloud · Report #2508422
Mail auto configurator can be tricked into sending account information to wrong servers
Validstatus
highseverity
$100bounty
34upvotes
15 Nov 2024disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vmhx-hwph-q6mc
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.