HexBrain

ownCloud · Report #85532

apps.owncloud.com: Edit Question didn't check ACLs

Validstatus
3upvotes
11 Sept 2015disclosed

How it was found

hello i find bug with it i can edit or delete any question users

poc link https://apps.owncloud.com/knowledgebase/editquestion.php?page=89

thanks

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original