Nextcloud · Report #561805

W3 Total Cache plugin multiple vulnerabilities

Validstatus

3upvotes

28 Jul 2019disclosed

How it was found

W3 Total Cache plugin (version <= 0.9.4.1) on the https://nextcloud.com has multiple vulnerabilities. See the screenshot.png

Remote Command Execution, Unauthenticated Security Token Bypass, Unauthenticated Arbitrary File Read etc.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original