| Package | Affected versions | Patched versions |
|---|---|---|
| nextcloud server | ≥ 13.0.0, < 13.0.11≥ 14.0.0, < 14.0.7≥ 15.0.0, < 15.0.3 | 13.0.1114.0.715.0.3 |
A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free