CVE-2024-52512
CVSS 3.1 Score 3.3 of 10 (low)
Details
Published Nov 15, 2024
CWE ID 601
Summary
CVE-2024-52512 is a vulnerability affecting the user_oidc app in Nextcloud. This OpenID Connect user backend is susceptible to a redirection issue, where a malicious user can craft a malformed login link. Upon successful authentication, the user is redirected to a URL of the attacker's choice. To mitigate this risk, users are advised to upgrade the Nextcloud User OIDC app to version 6.1.0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Nextcloud GmbH