Loading HuntDB...

Notes app can be tricked into using a received share created before the user logged in

Medium
N
Nextcloud
Submitted None

Team Summary

Official summary from Nextcloud

Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wfqv-cx85-7rjx

Reported by maholli

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Business Logic Errors