🎯 New Report #3507273: Email Enumeration via Password-Protected Share Identity Verification
🔺Severity: Low
👽 Reporter: cybershinu90
⭐️ Reputation: 92
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 100
🕐 Submitted: 2026-01-12
⏰ Disclosed: 2026-09-05 14:38:27
📝 Summary: The vulnerability allowed email enumeration through password-protected share identity verification. Requesting a password for an email share resulted in different response messages depending on whether the email address was the intended recipient, enabling confirmation of the share recipient.
📂 Report JSON File: 3507273
@hackeronereports