CVE-2024-1524

When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider IDP there is a risk that a local user store user's information may be replaced during the account provisioning process in cases where federated users share the same username as local users. There will...

PT-2022-16768

Name of the Vulnerable Software and Affected Versions FileCloud versions prior to 21.3 Description The issue allows for user enumeration. It exists in the path parameter when passing /SHARED/. A malicious actor could identify the existence of users by requesting share information on specified sha...