HexBrain

Nextcloud · Report #341074

Bruteforce in admin panel

Validstatus
highseverity
3upvotes
31 Jan 2020disclosed

How it was found

Hello there, Admin panel of your website (https://nextcloud.com/wp-login.php) is vulnerable to bruteforce attacks as their is no rate-limiting.

Impact

Can gain access to admin panel. To fix this, Just add rate limiting.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original