CVE-2024-22400

LOW

Nextcloud <5.1.5-6.0.1 - Open Redirect

Title source: llm

Description

Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.

References (4)

Scores

CVSS v3 3.1
EPSS 0.0027
EPSS Percentile 50.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Classification

CWE
CWE-601
Status published

Affected Products (2)

nextcloud/sso_\&_saml_authentication < 5.1.5
nextcloud/sso_\&_saml_authentication

Timeline

Published Jan 18, 2024
Tracked Since Feb 18, 2026