Lucene search
+L

2 matches found

Hacker One
Hacker One
added 2021/03/18 11:41 a.m.29 views

Nextcloud: Create alias does not validate account id

The request to create a new alias does not validate that account id belongs to the current user. Also we don't validate that the account id exists. curl 'http://localhost:50001/index.php/apps/mail/api/accounts/2000/aliases' \ -H 'Connection: keep-alive' \ -H 'Pragma: no-cache' \ -H 'Cache-Control...

4CVSS2.2AI score0.00988EPSS
SaveExploits0
Rows per page
Query Builder