Nextcloud · Report #592864
Non-admin users can trigger writes to memcached by entering a malicious server as a share URL
Validstatus
mediumseverity
$100bounty
15upvotes
9 Jul 2020disclosed
Summary
Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.