Design/Logic Flaw

2024-01-1820:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

nextcloud

user saml

saml

unauthorized redirection

security update

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON

Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.

CPENameOperatorVersion
sso_\\&_saml_authenticationeq6.0.0
sso_\\&_saml_authenticationge5.2.0
sso_\\&_saml_authenticationlt5.2.5
sso_\\&_saml_authenticationge5.0.0
sso_\\&_saml_authenticationlt5.1.5

Name	Operator	Version
sso_\\&_saml_authentication	eq	6.0.0
sso_\\&_saml_authentication	ge	5.2.0
sso_\\&_saml_authentication	lt	5.2.5
sso_\\&_saml_authentication	ge	5.0.0
sso_\\&_saml_authentication	lt	5.1.5