Nextcloud · Report #3521639
Improper Input Validation and Integer Overflow in timeamount parameter of files_retention app
Validstatus
lowseverity
23upvotes
5 Sept 2026disclosed
Summary
A missing validation of the provided value on API level, allowed an administrator to store a unintended long time amount as retention period potentially causing files to never get deleted.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.