cve.bz

CVE-2024-22400

6.1 mediumEPSS 0.5%

Medium (6.1) in nextcloud sso \& saml authentication. EPSS 0.5% chance of exploitation in the next 30 days.

Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.

Severity

CVSS 3.1

6.1 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-11-01)
CWE
CWE-601
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON