HexBrain

Nextcloud · Report #476615

Private/confidential setting of calendar events is ignored on activity stream

Validstatus
lowseverity
7upvotes
27 Jun 2019disclosed

How it was found

https://github.com/nextcloud/server/pull/13331

Events that are private should not generate events for other users Events that are confidential should not leak the name to other users

Impact

The details are leaked to other users

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original