Nextcloud · Report #3576823
SSRF on Nextcloud Whiteboard Application via Recordings to Unauthorised Access to Whiteboards
Validstatus
mediumseverity
$250bounty
17upvotes
27 Oct 2026disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-g8qc-xvwr-f684
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.