Nextcloud · Report #2597504
X-E2EE-SIGNATURE verification can be bypassed, leading to loss of confidentiality of end-to-end encrypted files
Validstatus
mediumseverity
27upvotes
15 Dec 2024disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-r4qc-m9mj-452v
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.