地图 / ID4ME does not validate signature or expiration

ID4ME does not validate signature or expiration

密码学缺陷 / Improper Verification of Cryptographic Signature / #1878391

厂商: Nextcloud
严重程度: 低危 · CVSS 5.4
赏金: $750
弱点: Improper Verification of Cryptographic Signature
研究员: @mikaelgundersen
披露日期: 2024-07-14
资产: nextcloud/user_oidc
CVE: CVE-2024-37886

该报告还没有中文解读。

时间线

2023-02-18报告提交
2024-07-14公开披露

阅读 HackerOne 原文 ↗作者 @mikaelgundersen · 版权归作者与 Nextcloud 所有

同类报告

connect.8x8.com/api/v1: JWT Algorithm Confusion Vulnerability8x8 · 2026-07-22 · $1,337 Missing HMAC validation on /uninstall webhook in Shopify/sample-django-app reference templateShopify · 2026-06-01