Priority MEDIUM 44
user_oidc app is an OpenID Connect user backend for Nextcloud.
nextcloud
Records402All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high73CVSS 7.0–8.9
Exploited now
nextcloud records in CISA KEVNo nextcloud vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in User Oidc · all components
TI-2026-33084 CVE-2026-45284
Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate
Priority LOW 37
Nextcloud is an open source content collaboration platform.
Priority LOW 36
user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform.
Priority LOW 29
user_oidc app is an OpenID Connect user backend for Nextcloud.
TI-2024-35183 CVE-2024-52512
Nextcloud User OIDC has an open redirection when logging in with User OIDC
Priority LOW 28
user_oidc app is an OpenID Connect user backend for Nextcloud.
TI-2026-33079 CVE-2026-45278
Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass
Priority LOW 27
Nextcloud is an open source content collaboration platform.
Priority LOW 24
user_oidc app is an OpenID Connect user backend for Nextcloud.
TI-2023-13354 CVE-2023-28848
CSRF protection on user_oidc login returned the expected token in case of an error
Priority LOW 24
user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform.
Priority LOW 23
user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform.