Description
user_oidc app is an OpenID Connect user backend for Nextcloud. A malicious user could send a malformed login link that would redirect the user to a provided URL after successfully authenticating. It is recommended that the Nextcloud User OIDC app is upgraded to 6.1.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nextcloud | security-advisories | >= 6.0.0, < 6.1.0 | — |
Advisories 1
- WID-SEC-2024-3484 Nextcloud: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 17, 2024