🎯 New Report #3382343: BOLA/IDOR in Out-of-Office API allows any authenticated user to read other users' absence data
🔺Severity: Medium
👽 Reporter: cyberjoker
⭐️ Reputation: 665
🛠 State: informative
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2025-10-13
⏰ Disclosed: 2026-04-14 18:48:25
📝 Summary: null
📂 Report JSON File: 3382343
@hackeronereports
Post #729
18