地图 / Invisible Salamanders Attack against end_to_end_encryption in Nextcloud

Invisible Salamanders Attack against end_to_end_encryption in Nextcloud

密码学缺陷 / Use of a Broken or Risky Cryptographic Algorithm / #2497947

厂商: Nextcloud
严重程度: 低危 · CVSS 6.5
赏金: —
弱点: Use of a Broken or Risky Cryptographic Algorithm
研究员: @pseudo-llrktbeyk
披露日期: 2024-12-03
资产: nextcloud/end_to_end_encryption
CVE: —

该报告还没有中文解读。

时间线

2024-05-09报告提交
2024-12-03公开披露

阅读 HackerOne 原文 ↗作者 @pseudo-llrktbeyk · 版权归作者与 Nextcloud 所有

同类报告

0 Click account takeover via timed requests to ███████forgot-password (single-packet attack)Mars · 2024-07-11 iOS group chat denial of serviceLY Corporation · 2023-03-29 · $300 Weak ssh algorithms and CVE-2023-48795 Discovered on various subdomains of nextcloud.comNextcloud · 2024-05-22 Default Minimum TLS Version Set to TLS v1.0 (Cryptographic Weakness)curl · 2025-07-10 Use of a Broken or Risky Cryptographic Algorithm (CWE-327) in libcurlcurl · 2025-04-29 Insecure SHA1withRSA in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.comHackerOne · 2017-06-21