Private/confidential setting of calendar events is ignored on activity stream

Disclosed: 2019-06-27 08:45:58 By nickvergessen To nextcloud
Low
Vulnerability Details
https://github.com/nextcloud/server/pull/13331 Events that are private should not generate events for other users Events that are confidential should not leak the name to other users ## Impact The details are leaked to other users
Actions
View on HackerOne
Report Stats
  • Report ID: 476615
  • State: Closed
  • Substate: resolved
  • Upvotes: 7
Share this report