Lucene search

K
hackeroneAnna_larchH1:1561471
HistoryMay 06, 2022 - 1:21 p.m.

Nextcloud: Password disclosure in initial setup of Mail App

2022-05-0613:21:46
anna_larch
hackerone.com
13
nextcloud
mail app
password disclosure

EPSS

0.001

Percentile

41.4%

Summary:

https://github.com/nextcloud/mail/issues/823

Steps To Reproduce:

https://github.com/nextcloud/mail/issues/823

Impact

Complete access to a IMAP account and possibly if the password is the same for the NC account, complete account control.

EPSS

0.001

Percentile

41.4%