Vulners
Lucene search
2 matches found
Authentication flaw
Nextcloud is an open-source, self-hosted productivity platform. Prior to Nextcloud Server versions 20.0.13, 21.0.5, and 22.2.0, the Two-Factor Authentication wasn't enforced for pages marked as public. Any page marked as @PublicPage could thus be accessed with a valid user session that isn't...
4CVSS6.6AI score0.01157EPSS
SaveExploits0References3Affected Software1
CVE-2021-41179 Two-Factor Authentication not enforced for pages marked as public
Nextcloud is an open-source, self-hosted productivity platform. Prior to Nextcloud Server versions 20.0.13, 21.0.5, and 22.2.0, the Two-Factor Authentication wasn't enforced for pages marked as public. Any page marked as @PublicPage could thus be accessed with a valid user session that isn't...
6.5CVSS7.6AI score0.01157EPSS
SaveExploits0References3
20