Nextcloud · Report #1258448
Missing brute force protection on OAuth2 API controller
Validstatus
mediumseverity
$500bounty
20upvotes
10 Aug 2023disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vv27-g2hq-v48h
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.