← Database

CVE-2024-52512

LOW CVSS: 3.3 Published: 2024-11-15 Modified: 2026-06-17

Description

user_oidc app is an OpenID Connect user backend for Nextcloud. A malicious user could send a malformed login link that would redirect the user to a provided URL after successfully authenticating. It is recommended that the Nextcloud User OIDC app is upgraded to 6.1.0.

Affected Platforms

Nextcloud User Oidc

Weakness Type

CWE-601

References