medium5.4
CVE-2019-15617
A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login.
Impact
A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Nextcloud Server | before 17.0.1 |