CVE-2023-28848CWE-352

CSRF protection on user_oidc login returned the expected token in case of an error

Medium · published April 4, 2023

CVSS v3.1
4.8
EPSS
0%
Percentile
25.2
In the wild
Unconfirmed
What it is

user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effectively allowed an attacker to bypass the state protection as they could just copy the expected state token from the first request to their second request. Users should upgrade user_oidc to 1.3.0 to receive a patch for the issue. No known workarounds are available.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2023-04-04T12:38Z
EPSS history
Timeline
  • 04 APR 12:38Z
    CSRF protection on user_oidc login returned the expected token in case of an error
    cvelistv5