Nextcloud · Report #3511955
Unauthorized users can enumerate internal team resources via the Teams API when a team is visible to everyone
Validstatus
mediumseverity
9upvotes
27 Oct 2026disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-67c5-gw7r-w35f
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.