1 matches found
Nextcloud: Issuer not verified from obtained token in user_oidc
The issuer verification in the useroidc app of Nextcloud did not properly validate the issuer of the obtained token, potentially allowing for a Man-in-the-Middle attack...