CVE-2024-22400
Open redirect in user_saml via RelayState parameter in Nextcloud User Saml
Summary
Open redirect in user_saml via RelayState parameter in Nextcloud User Saml
Original description
The description as published by the source.
Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web hackerone.com