Nextcloud · Report #3247499
Deck app allowed user with "Can share" permission to modify permissions of other non-owners
Validstatus
mediumseverity
38upvotes
5 Dec 2025disclosed
Summary
Security advisory in https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wwr8-hx9g-rjvv
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.