📦 Two Factor Webauthn

A vulnerability in Nextcloud's Twofactor WebAuthn plugin allows attackers to remove a user's WebAuthn 2FA device by correctly guessing a long random string. This forces the victim to re-register their...