Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2024-22400

Open redirect in user_saml via RelayState parameter in Nextcloud User Saml

Description

Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nextcloud security-advisories

  • >= 5.0.0, < 5.1.5affected
  • >= 5.2.0, < 5.2.5affected
  • >= 6.0.0, < 6.0.1affected

References