Nextcloud · Report #403909
Information Exposure Through Directory Listing - https://apps.nextcloud.com/static/
Duplicatestatus
lowseverity
1upvotes
7 Jan 2019disclosed
How it was found
Hi Security Team,
Url : https://apps.nextcloud.com/static/assets/ Dork : site:nextcloud.com intitle:index.of
Hello I am Ismail Tasdelen. I was testing directory security and I saw many directories open.
Thanks
Impact
A directory listing is inappropriately exposed, yielding potentially sensitive information to attackers. This is a motive source for attackers.