CVE-2022-39338 — Improper Input Validation in Security-advisories

CWE-20 — Improper Input Validation CWE-79 — Cross-site Scripting2 documents2 sources

Severity

5.4MEDIUMNVD

CNA3.5

EPSS

0.3%

top 45.80%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Nextcloud Security-advisories Nextcloud Openid Connect User Backend

Timeline

PublishedNov 25

Description

user_oidc is an OpenID Connect user backend for Nextcloud. Versions prior to 1.2.1 did not properly validate discovery urls which may lead to a stored cross site scripting attack vector. The impact is limited due to the restrictive CSP that is applied on this endpoint. Additionally this vulnerability has only been shown to be exploitable in the Safari web browser. This issue has been addressed in version 1.2.1. Users are advised to upgrade. Users unable to upgrade should urge their users to avoi…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages2 packages

▶NVDnextcloud/openid_connect_user_backend< 1.2.1

▶CVEListV5nextcloud/security-advisories< 1.2.1

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

CVEList

Stored cross site scripting (XSS) vulnerability via Authorization Endpoint in user_oidc↗2022-11-25

▶