CVE-2024-22400

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

Vendor	Product	Versions
nextcloud	security-advisories	>= 5.0.0, < 5.1.5; >= 5.2.0, < 5.2.5; >= 6.0.0, < 6.0.1

References

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-622q-xhfr-xmv7Vendor Advisory
https://github.com/nextcloud/user_saml/commit/b184304a476deeba36e92b70562d5de7c2f85f8aPatch
https://github.com/nextcloud/user_saml/pull/788Patch
https://hackerone.com/reports/2263044Permissions Required, Third Party Advisory
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-622q-xhfr-xmv7Vendor Advisory
https://github.com/nextcloud/user_saml/commit/b184304a476deeba36e92b70562d5de7c2f85f8aPatch
https://github.com/nextcloud/user_saml/pull/788Patch
https://hackerone.com/reports/2263044Permissions Required, Third Party Advisory

Timeline

Published: Jan 18, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-224014.3Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users could change t CVE-2024-224025.4Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users were able to l CVE-2024-224033.7Nextcloud server is a self hosted personal cloud system. In affected versions OAuth codes did not expire. When an attacker would get access CVE-2024-224044.3Nextcloud files Zip app is a tool to create zip archives from one or multiple files from within Nextcloud. In affected versions users can do CVE-2024-224055.5XADMaster is an objective-C library for archive and file unarchiving and extraction. When extracting a specially crafted zip archive XADMast CVE-2024-224069.8Shopware is an open headless commerce platform. The Shopware application API contains a search functionality which enables users to search t CVE-2024-224076.5Shopware is an open headless commerce platform. In the Shopware CMS, the state handler for orders fails to sufficiently verify user authoriz CVE-2024-224088.1Shopware is an open headless commerce platform. The implemented Flow Builder functionality in the Shopware application does not adequately v CVE-2024-224098.8DataHub is an open-source metadata platform. In affected versions a low privileged user could remove a user, edit group members, or edit ano CVE-2024-22416.3Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintend CVE-2024-224107.8Creditcoin is a network that enables cross-blockchain credit transactions. The Windows binary of the Creditcoin node loads a suite of DLLs p CVE-2024-224115.4Avo is a framework to create admin panels for Ruby on Rails apps. In Avo 3 pre12, any HTML inside text that is passed to `error` or `succeed