Nextcloud · Report #3489490
Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC
Validstatus
highseverity
$2,500bounty
55upvotes
7 Jun 2026disclosed
Summary
Security advisory in https://github.com/nextcloud/security-advisories/security/advisories/GHSA-qqgv-fqwp-mjpp
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.