PT-2024-19393

Name of the Vulnerable Software and Affected Versions Nextcloud guests app versions prior to 2.4.1 Nextcloud guests app versions prior to 2.5.1 Nextcloud guests app versions prior to 3.0.1 Description The Nextcloud guests app is a utility to create guest users which can only see files shared with...

Shopify: apps.shopify.com - CSRF token leakage through Google Analytics

Description: When a user tries to send a support a message to an app developer in apps.shopify.com , he will be asked to login and once he is logged in , he will be redirected to apps.shopify.com/appid?authenticitytoken=currentuserauthenticitytoken. Developers can track their app page view in...