Vulnerabilities > CVE-2023-39954 - Unspecified vulnerability in Nextcloud User Oidc

047910
CVSS 8.1 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
nextcloud
NVD
Published: 2023-08-10
Updated: 2024-11-21

Summary

user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, an attacker that obtained at least read access to a snapshot of the database can impersonate the Nextcloud server towards linked servers. user_oidc 1.3.3 contains a patch. No known workarounds are available.

Vulnerable Configurations

Part Description Count
Application
Nextcloud
7

References