Nextcloud · Report #145488
failure to invalidate session on password change
Informativestatus
3upvotes
20 Apr 2017disclosed
How it was found
Steps to reproduce
- Login as user1 in firefox browser
- Go to http://localhost/nextcloud/index.php/settings/personal
- Go to other browser (chrome) and login as user1
- Change the password in chrome
Observe that the session in firefox still works