Password disclosure in initial setup of Mail App

Disclosed: 2022-09-03 06:23:59 By anna_larch To nextcloud
Low
Vulnerability Details
## Summary: https://github.com/nextcloud/mail/issues/823 ## Steps To Reproduce: https://github.com/nextcloud/mail/issues/823 ## Impact Complete access to a IMAP account and possibly if the password is the same for the NC account, complete account control.
Actions
View on HackerOne
Report Stats
  • Report ID: 1561471
  • State: Closed
  • Substate: resolved
  • Upvotes: 16
Share this report