Nextcloud · Report #3462991
SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution
Validstatus
highseverity
80upvotes
15 May 2026disclosed
Summary
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x43f-gmgh-vvjj
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.