CVE-2023-32074

概要

参考情報

• nextcloud/security-advisories security advisory · Vendor Advisory
• nextcloud/user_oidc#615 · Issue Tracking
• hackerone.com/reports/1954711 · Permissions Required

user oidc のその他の脆弱性

• CVE-2026-45284高 8.8Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper check allowed users that…
• CVE-2026-45278中 6.1Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that wou…
• CVE-2024-52512中 6.1user_oidc app is an OpenID Connect user backend for Nextcloud. A malicious user could send a malformed login link that would redirect the us…
• CVE-2024-37886中 4.7user_oidc app is an OpenID Connect user backend for Nextcloud. An attacker could potentially trick the app into accepting a request that is …
• CVE-2024-37312中 6.3user_oidc app is an OpenID Connect user backend for Nextcloud. Missing access control on the ID4me endpoint allows an attacker to register a…