Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2024-52512

Nextcloud User OIDC has an open redirection when logging in with User OIDC

Description

user_oidc app is an OpenID Connect user backend for Nextcloud. A malicious user could send a malformed login link that would redirect the user to a provided URL after successfully authenticating. It is recommended that the Nextcloud User OIDC app is upgraded to 6.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nextcloud security-advisories

  • >= 6.0.0, < 6.1.0affected

References