low3.1
CVE-2024-22400
Nextcloud User Saml is an app for authenticating Nextcloud users using SAML.
Impact
Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Sso \& Saml Authentication | from 5.0.0 before 5.1.5 from 5.2.0 before 5.2.5 Version 6.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-622q-xhfr-xmv7
- https://github.com/nextcloud/user_saml/commit/b184304a476deeba36e92b70562d5de7c2f85f8a
- https://github.com/nextcloud/user_saml/pull/788
- https://hackerone.com/reports/2263044
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-622q-xhfr-xmv7
- https://github.com/nextcloud/user_saml/commit/b184304a476deeba36e92b70562d5de7c2f85f8a
- https://github.com/nextcloud/user_saml/pull/788
- https://hackerone.com/reports/2263044