🎯 New Report #3489490: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC
🔺Severity: High
👽 Reporter: priyanka010
⭐️ Reputation: 131
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: 2500
🕐 Submitted: 2026-01-07
⏰ Disclosed: 2026-06-07 09:16:00
📝 Summary: An authentication bypass vulnerability was discovered in the ID4me handling in the OIDC implementation. The vulnerability was caused by missing JWT signature verification for user authentication.
📂 Report JSON File: 3489490
@hackeronereports