PT-2024-19391 · Nextcloud · Nextcloud User Saml

Ry0Tak · Published 2024-01-18 · Updated 2024-01-26 · CVE-2024-22400

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud User Saml versions prior to 5.1.5 Nextcloud User Saml versions prior to 5.2.5 Nextcloud User Saml versions prior to 6.0.1

Description Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions, users can be given a link to the Nextcloud server and end up on an uncontrolled third-party server.

Recommendations For versions prior to 5.1.5, upgrade to version 5.1.5 or later. For versions prior to 5.2.5, upgrade to version 5.2.5 or later. For versions prior to 6.0.1, upgrade to version 6.0.1 or later. As a temporary workaround, consider restricting access to the SAML authentication feature until a patch is available.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2024-22400

GHSA-622Q-XHFR-XMV7

Affected Products

Nextcloud User Saml

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22400.json · Exploit
• https://github.com/nextcloud/user_saml/commit/b184304a476deeba36e92b70562d5de7c2f85f8a · Patch
• https://github.com/nextcloud/user_saml/pull/788 · Patch
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-622q-xhfr-xmv7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22400 · Security Note
• https://osv.dev/vulnerability/CVE-2024-22400 · Vendor Advisory
• https://t.me/cvenotify/68960 · Telegram Post
• https://twitter.com/CVEnew/status/1748067184960577658 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1748097478677664214 · Twitter Post
• https://hackerone.com/reports/2263044 · Note