CVE-2024-37886

概要

参考情報

• nextcloud/security-advisories security advisory · Vendor Advisory
• nextcloud/user_oidc#715 · Issue Tracking
• hackerone.com/reports/1878391 · Issue Tracking

user oidc のその他の脆弱性

• CVE-2026-45284高 8.8Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper check allowed users that…
• CVE-2026-45278中 6.1Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that wou…
• CVE-2024-52512中 6.1user_oidc app is an OpenID Connect user backend for Nextcloud. A malicious user could send a malformed login link that would redirect the us…
• CVE-2024-37312中 6.3user_oidc app is an OpenID Connect user backend for Nextcloud. Missing access control on the ID4me endpoint allows an attacker to register a…
• CVE-2023-39954高 8.1user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to versio…