CVE-2024-22400CWE-601

Open redirect in user_saml via RelayState parameter in Nextcloud User Saml

Low · published January 18, 2024

CVSS v3.1
3.1
EPSS
0%
Percentile
38.4
In the wild
Unconfirmed
What it is

Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00454 · 38.4th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-01-18T19:21Z
EPSS history
Timeline
  • 18 JAN 19:21Z
    Open redirect in user_saml via RelayState parameter in Nextcloud User Saml
    cvelistv5