Nextcloud · Report #478957
Stored XSS/HTML injection in autocomplete suggestions for sharing
Validstatus
mediumseverity
6upvotes
27 Jun 2019disclosed
How it was found
encrypted report, see attached GnuPG file. I tried to send this by mail, but [email protected] told me that I'm forced (sic!) to signup here. Please use 7F40 5A4F FAA3 F51B FEFD EE2F CE82 B2C8 6DCE BB9F to contact me.
Impact
encrypted report, see attached GnuPG file