CVE-2024-22400
published 2024-01-18CVE-2024-22400: Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up…
PriorityP427medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.45%
36.3th percentile
Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nextcloud | security-advisories | — | — |
| nextcloud | security-advisories | — | — |
| nextcloud | security-advisories | — | — |
| nextcloud | sso_saml_authentication | — | — |
| nextcloud | sso_saml_authentication | >= 5.0.0 < 5.1.5 | 5.1.5 |
| nextcloud | sso_saml_authentication | >= 5.2.0 < 5.2.5 | 5.2.5 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No advisories linked to this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-622q-xhfr-xmv7https://github.com/nextcloud/user_saml/commit/b184304a476deeba36e92b70562d5de7c2f85f8ahttps://github.com/nextcloud/user_saml/pull/788https://hackerone.com/reports/2263044https://github.com/nextcloud/security-advisories/security/advisories/GHSA-622q-xhfr-xmv7https://github.com/nextcloud/user_saml/commit/b184304a476deeba36e92b70562d5de7c2f85f8ahttps://github.com/nextcloud/user_saml/pull/788https://hackerone.com/reports/2263044
2024-01-18
Published