← Zuruck zu CVEs

CVE-2024-22400

LOW

3.1

Beschreibung

Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.

CVE Details

CVSS v3.1 Bewertung3.1

SchweregradLOW

CVSS VektorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

AngriffsvektorNETWORK

KomplexitatHIGH

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht1/18/2024

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

nextcloud:sso_\&_saml_authentication

Schwachen (CWE)

CWE-601

Referenzen

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-622q-xhfr-xmv7(security-advisories@github.com)

https://github.com/nextcloud/user_saml/commit/b184304a476deeba36e92b70562d5de7c2f85f8a(security-advisories@github.com)

https://github.com/nextcloud/user_saml/pull/788(security-advisories@github.com)

https://hackerone.com/reports/2263044(security-advisories@github.com)

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-622q-xhfr-xmv7(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/nextcloud/user_saml/commit/b184304a476deeba36e92b70562d5de7c2f85f8a(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/nextcloud/user_saml/pull/788(af854a3a-2127-422b-91ae-364da2661108)

https://hackerone.com/reports/2263044(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.