Nextcloud · Report #1265709
Lack of bruteforce protection for TOTP 2FA
Validstatus
mediumseverity
$750bounty
22upvotes
26 Mar 2023disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-fj39-4qx4-m3f2
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.