Nextcloud · Report #685990
Clear text storage of proxy parameters and passwords
Validstatus
lowseverity
53upvotes
16 Sept 2020disclosed
Summary
Proxy settings of the Nextcloud desktop client were not stored in a save way, instead they where just base64 encoded stored in the nextcloud.cfg file.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.