Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2023-32074

Nextcloud user_oidc app is missing brute force protection

Description

user_oidc app is an OpenID Connect user backend for Nextcloud. Authentication can be broken/bypassed in user_oidc app. It is recommended that the Nextcloud user_oidc app is upgraded to 1.3.2

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nextcloud security-advisories

  • < 1.3.2affected

References