Denial of Service when entring an Array in email at seetings

Disclosed: 2020-08-19 11:02:28 By stilobit To nextcloud
Medium
Vulnerability Details
in settings `https://demo2.nextcloud.com/index.php/settings/users/TweLbFT93aqRnEfF/settings` when you submit the request with email value Array the server return `500 Internal Server Error` Poc video: F954435 ## Impact denial a service attack on the server. This may lead to the website becoming slow or unresponsive.
Actions
View on HackerOne
Report Stats
  • Report ID: 961997
  • State: Closed
  • Substate: informative
  • Upvotes: 1
Share this report