Nextcloud · Report #341074
Bruteforce in admin panel
Validstatus
highseverity
3upvotes
31 Jan 2020disclosed
How it was found
Hello there, Admin panel of your website (https://nextcloud.com/wp-login.php) is vulnerable to bruteforce attacks as their is no rate-limiting.
Impact
Can gain access to admin panel. To fix this, Just add rate limiting.