HackerOne Disclosed Reports - 2025-10-16

Medium
resolved

Path Traversal Vulnerability in Nextcloud Tables Enables Arbitrary File Exfiltration of Any Files Supported by PhpSpreadsheet Library

Bug reported by was disclosed at October 16, 2025, 6:52 am   |   Path Traversal

A path traversal vulnerability was discovered in Nextcloud Tables. This vulnerability allowed the exfiltration of any files supported by the PhpSpreadsheet library.