Nextcloud · Report #2248689
Authentication bypass in Global Site Selector allows an attacker to log in as any user
Validstatus
criticalseverity
50upvotes
18 Jan 2024disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vj5q-f63m-wp77
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.