exploitDog

CVE-2023-32074

Опубликовано: 25 мая 2023

Источник: nvd

CVSS3: 8

CVSS3: 9.8

EPSS Низкий

Описание

user_oidc app is an OpenID Connect user backend for Nextcloud. Authentication can be broken/bypassed in user_oidc app. It is recommended that the Nextcloud user_oidc app is upgraded to 1.3.2

Ссылки

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x8mc-84wj-rf34
Vendor Advisory
https://github.com/nextcloud/user_oidc/pull/615
Issue Tracking
Patch
https://hackerone.com/reports/1954711
Permissions Required
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x8mc-84wj-rf34
Vendor Advisory
https://github.com/nextcloud/user_oidc/pull/615
Issue Tracking
Patch
https://hackerone.com/reports/1954711
Permissions Required

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nextcloud:user_oidc:*:*:*:*:*:*:*:*

Версия до 1.3.2 (исключая)

EPSS

Процентиль: 53%

0.00306

Низкий

8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-307

CWE-307

EPSS

Процентиль: 53%

0.00306

Низкий

8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-307

CWE-307