🎯 New Report #3599470: Improper input validation in emoji field leads to sidebar UI denial of service
🔺Severity: Low
👽 Reporter: yoyomiski
⭐️ Reputation: 1091
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2026-03-12
⏰ Disclosed: 2026-09-20 10:04:20
📝 Summary: A vulnerability was discovered in the Collectives app version 4.0.0 where the emoji field in the page emoji update endpoint did not properly validate user input. An attacker could have submitted an excessively long string including newline characters instead of a valid emoji, causing the sidebar layout to become broken.
📂 Report JSON File: 3599470
@hackeronereports