Nextcloud · Report #3483708
Valid share tokens allow to access tempory upload files of share owner
Validstatus
mediumseverity
65upvotes
7 Jun 2026disclosed
Summary
Security advisory in https://github.com/nextcloud/security-advisories/security/advisories/GHSA-45pj-p7x7-4mhc
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.