Nextcloud · Report #961997
Denial of Service when entring an Array in email at seetings
Informativestatus
mediumseverity
1upvotes
19 Aug 2020disclosed
How it was found
in settings https://demo2.nextcloud.com/index.php/settings/users/TweLbFT93aqRnEfF/settings
when you submit the request with email value Array the server return 500 Internal Server Error
Poc video:
F954435
Impact
denial a service attack on the server. This may lead to the website becoming slow or unresponsive.