POJIA破甲
地图 / Lack of Brute force protection while joining video call in talk section which is password protected

Lack of Brute force protection while joining video call in talk section which is password protected

信息泄露 / 隐私侵犯 / #1596673

厂商
Nextcloud
严重程度
低危 · CVSS 3.5
赏金
—
弱点
隐私侵犯
研究员
@errorsec_
披露日期
2022-08-08
资产
nextcloud/server
CVE
CVE-2022-35932

该报告还没有中文解读。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @errorsec_ · 版权归作者与 Nextcloud 所有

同类报告

Physical Laptop TakeoverEd · 2018-08-12Connection informaton is sent to a third-party serviceNord Security · —Blocked user can see live videoTikTok · 2021-05-28 · $418Twitter ID exposure via error-based side-channel attackX / xAI · 2019-05-16 · $1,470Intent Leads To Unauthorised Video Call Initiation Leaking Surrounding Informations Of VictimSnapchat · 2024-04-05Changing email address on Twitter for Android unsets "Protect your Tweets"X / xAI · 2019-01-18 · $2,940