CVE-2024-22400
Open redirect in user_saml via RelayState parameter in Nextcloud User Saml
Résumé
Open redirect in user_saml via RelayState parameter in Nextcloud User Saml
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web hackerone.com