CVE-2023-28848

MEDIUM

Nextcloud user_oidc 1.0.0-1.3.0 - Cross-Site Request Forgery via State Token Bypass

Title source: llm
STIX 2.1

Description

user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effectively allowed an attacker to bypass the state protection as they could just copy the expected state token from the first request to their second request. Users should upgrade user_oidc to 1.3.0 to receive a patch for the issue. No known workarounds are available.

References (3)

Core 3
Core References
Patch, Vendor Advisory x_refsource_misc
https://github.com/nextcloud/user_oidc/pull/580
Third Party Advisory x_refsource_misc
https://hackerone.com/reports/1878381

Scores

CVSS v3 4.8
EPSS 0.0022
EPSS Percentile 45.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-352
Status published
Products (1)
nextcloud/user_oidc 1.0.0 - 1.3.0
Published Apr 04, 2023
Tracked Since Feb 18, 2026