Nextcloud · Report #2554079
External storage - global credentials returned to the client side in plaintext
Validstatus
mediumseverity
28upvotes
21 Nov 2024disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x9q3-c7f8-3rcg
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.