Emilian Mitocariu

Multiple SMS tokens could be requested if an attacker finds one username, leading to big expenses

1

Hi, Reset by SMS requires only the username to send a token. It is not very difficult for an attacker to find one username and use it to make multiple...

Errors in Nextcloud logs saying the included CAS.php is deprecated

3

**Describe the bug** Nextcloud logs are flooded by errors (exact errors added to the Screenshots section) saying the included CAS.php is deprecated, but from what I see version 1.9.0 comes...