Lucene search

K
hackeroneLeonklingeleH1:508487
HistoryMar 12, 2019 - 3:42 p.m.

Nextcloud: Arbitrary SQL command injection

2019-03-1215:42:48
leonklingele
hackerone.com
22

EPSS

0.001

Percentile

49.5%

When querying for users on the lookup server any unauthenticated user could perform an SQL Injection.

EPSS

0.001

Percentile

49.5%