地图 / Mail contact autocomplete bypasses administrator-configured user enumeration restrictions and expose member information outside the intended scope

Mail contact autocomplete bypasses administrator-configured user enumeration restrictions and expose member information outside the intended scope

信息泄露 / 隐私侵犯 / #3617729

厂商: Nextcloud
严重程度: 低危 · CVSS 4.3
赏金: $250
弱点: 隐私侵犯
研究员: @njh215
披露日期: 2026-09-04
资产: nextcloud/mail
CVE: CVE-2026-61545

该报告还没有中文解读。

原文摘录

摘自原文（2344 字符中的一小部分）

Summary: An authenticated user can enumerate other users' directory entries, including ID, display name, and email address, even when the instance is configured to restrict user enumeration to same-group or exact-match scenarios.

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Nextcloud 所有。

时间线

2026-03-20报告提交
2026-09-04公开披露

阅读 HackerOne 原文 ↗作者 @njh215 · 版权归作者与 Nextcloud 所有

Mail contact autocomplete bypasses administrator-configured user enumeration restrictions and expose member information outside the intended scope

原文摘录

时间线

同类报告