Description
Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Server | <14.0.0 | — |
Unscored
CVE-2018-16465
EUVD-2018-8301GHSA-v76x-gvw2-m5rp
Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second f…
Published Oct 30, 2018 · Updated Aug 5, 2024 · Assigned by hackerone