| CVE | CVE-2023-32074 |
| CVE Title | |
| Published Date | 2023-05-25T23:15Z |
| Modified Date | 2023-05-26T12:43Z |
| Description | user_oidc app is an OpenID Connect user backend for Nextcloud. Authentication can be broken/bypassed in user_oidc app. It is recommended that the Nextcloud user_oidc app is upgraded to 1.3.2 |
| References | |
| By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites. | |
| Reference URL | https://github.com/nextcloud/user_oidc/pull/615 |
| Reference Description | MISC https://github.com/nextcloud/user_oidc/pull/615 |
| Reference URL | https://hackerone.com/reports/1954711 |
| Reference Description | MISC https://hackerone.com/reports/1954711 |
| Reference URL | https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x8mc-84wj-rf34 |
| Reference Description | MISC https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x8mc-84wj-rf34 |
| Sources | NIST MITRE |
Note
- No CVSS data for this CVE