HexBrain

Nextcloud · Report #403909

Information Exposure Through Directory Listing - https://apps.nextcloud.com/static/

Duplicatestatus
lowseverity
1upvotes
7 Jan 2019disclosed

How it was found

Hi Security Team,

Url : https://apps.nextcloud.com/static/assets/ Dork : site:nextcloud.com intitle:index.of

Hello I am Ismail Tasdelen. I was testing directory security and I saw many directories open.

Thanks

Impact

A directory listing is inappropriately exposed, yielding potentially sensitive information to attackers. This is a motive source for attackers.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original