Loading HuntDB...

Desktop client does not verify received singed certificate in end to end encryption

Medium
N
Nextcloud
Submitted None

Team Summary

Official summary from Nextcloud

Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h82x-98q3-7534

Reported by mikaelgundersen

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Bounty

$1000.00

Submitted

Weakness

Improper Certificate Validation