Missing permission check for reading form submissions

None...

Remote code execution in Nextcloud Flow via vulnerable Windmill version

None...

Mail stored HTML injection in subject text

None...

Deck app allowed user with "Can share" permission to modify permissions of other non-owners

None...

Two-Factor Authentication Bypass via Pending Session Token Replay

None...

Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner

None...

Logged-in user bypasses share password and download restrictions on Text attachments via documentId

None...

Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update

None...

Authorization bypass in approval feature allows unauthorized file sharing with approvers

None...

ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames

None...

Tables app share information not limited to relevant users

None...

Users can modify tags on files that do not belong to them

None...

SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution

None...

Calendar app leaked user identifiers via attendee suggestion endpoint

None...

PIN bypass in PassCodeActivity via back button

None...

Files Lock app allows users to lock and unlock files of other users

None...

Limited path traversal via template API if using `{lang}` in config

None...

Unauthorized force-mute from missing permission check when using internal signaling

None...

Stored XSS in contacts app via organisation and title field

None...

Private circle can be added to another circle via API

None...

Calendar app used predictable proposal participant tokens

None...

Contacts search allowed users to retrieve contact information of other users beyond their contact list

None...

Users with read-only permissions for team folder can restore deleted files from trash bin

None...

admin_audit does not log all actions on files in groupfolders

None...

Missing ownership check in Tables app allows moving columns into tables of other users

None...

Approval app allows users to request approval for other users file

None...

Calendar app allowed booking appointments without the generated token

None...

Deck app allows to spoof file extensions by using RTLO characters

None...

Information disclosure via Desktop client when attempting to lock a file inside a end-to-end encrypted directory

None...

Tables app allowed users to view columns metadata information of any table

None...

WebAuthn app was updated based on public key

None...

Tables app allowed to include local file via PhpSpreadsheet when importing a table

None...

Participants were able to blindly delete poll drafts of other users by ID

None...

Development files shipped in files_pdfviewer app

None...