Dark C0d3rs

Full Version: HackerOne Disclosed Reports - 2025-10-16
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Logo
Medium
resolved

Path Traversal Vulnerability in Nextcloud Tables Enables Arbitrary File Exfiltration of Any Files Supported by PhpSpreadsheet Library


Bug reported by was disclosed at October 16, 2025, 6:52 am   |   Path Traversal

A path traversal vulnerability was discovered in Nextcloud Tables. This vulnerability allowed the exfiltration of any files supported by the PhpSpreadsheet library.