← 返回地图
破甲
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
SSRF on Nextcloud Whiteboard Application via Recordings to Unauthorised Access to Whiteboards
服务端请求伪造
/
SSRF
/ #3576823
厂商
Nextcloud
严重程度
低危
· CVSS 4.6
赏金
$250
弱点
SSRF
研究员
@alex-elttam
披露日期
2026-10-27
资产
—
CVE
CVE-2026-87897
该报告还没有中文解读。
时间线
2026-02-27
报告提交
2026-10-27
公开披露
阅读 HackerOne 原文 ↗
作者 @alex-elttam · 版权归作者与 Nextcloud 所有
同类报告
SSRF in Exchange leads to ROOT access in all instances
Shopify · 2018-05-23
Server Side Request Forgery (SSRF) via Analytics Reports
HackerOne · 2023-12-08 · $25,000
Server-Side Request Forgery using Javascript allows to exfill data from Google Metadata
Snapchat · 2020-11-30
Server Side Request Forgery (SSRF) at app.hellosign.com leads to AWS private keys disclosure
Dropbox · — · $4,913
SSRF on project import via the remote_attachment_url on a Note
GitLab · 2020-06-07 · $10,000
Server Side Request Forgery mitigation bypass
GitLab · 2020-04-18
SSRF on Nextcloud Whiteboard Application via Recordings to Unauthorised Access to Whiteboards · 破甲 POJIA