SSRF via filter bypass due to lax checking on IPs
Nextcloud disclosed a bug submitted by obitorasu: https://hackerone.com/reports/1702864 - Bounty: $250 [Source]
No password length restriction in reset password endpoint
Nextcloud disclosed a bug submitted by aditya404: https://hackerone.com/reports/1820864 [Source]
How will the NIS2 Directive impact the European bug bounty market?
The NIS2 Directive is due to be implemented across the EU by September next year. Find out how the legislation will impact the region’s bug bounty and cybersecurity industry. In 2022, the bug bounty and crowdsourced security industry experienced a surge in its validation and growth across the globe due...