| Package | Affected versions | Patched versions |
|---|---|---|
| nextcloud server | < 19.0.2 | 19.0.2 |
A wrong configuration in Nextcloud Server 19.0.1 incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the PIN of the passwordless WebAuthn but not verifying it.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free