Vulnerabilities

TI-2026-33084 CVE-2026-45284

Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate

LOW 37

Nextcloud is an open source content collaboration platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00193 Published 2026-06-01 Fixed in 8.4.0 CWE-284

TI-2026-33079 CVE-2026-45278

LOW 27

Nextcloud is an open source content collaboration platform.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00232 Published 2026-06-01 Fixed in 8.2.2 CWE-601

TI-2024-35183 CVE-2024-52512

LOW 28

user_oidc app is an OpenID Connect user backend for Nextcloud.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00434 Published 2024-11-15 Fixed in 6.1.0 CWE-601

TI-2024-25203 CVE-2024-37886

LOW 24

user_oidc app is an OpenID Connect user backend for Nextcloud.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0024 Published 2024-06-14 Fixed in 1.3.5 CWE-347

TI-2024-24824 CVE-2024-37312

LOW 29

user_oidc app is an OpenID Connect user backend for Nextcloud.

CVSS 3.1MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.00637 Published 2024-06-14 No fix listed CWE-284

TI-2023-20847 CVE-2023-39954

LOW 36

user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00444 Published 2023-08-10 Fixed in 1.3.3 CWE-311

TI-2023-20846 CVE-2023-39953

LOW 23

user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00542 Published 2023-08-10 Fixed in 1.3.3 CWE-303

TI-2023-15378 CVE-2023-32074

MEDIUM 44

user_oidc app is an OpenID Connect user backend for Nextcloud.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00854 Published 2023-05-25 Fixed in 1.3.2 CWE-307

TI-2023-13354 CVE-2023-28848

LOW 24

user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00333 Published 2023-04-04 Fixed in 1.3.0 CWE-352