Nextcloud Whiteboard server request forgery vulnerability

Versions prior to Nextcloud Whiteboard 1.0.0 contain a server-side request forgery vulnerability. This vulnerability arises from the ability to access the internal Chrome DevTools Protocol API, which can be used to expose another user’s JWT authentication token. Low-privilege attackers can exploi...