Lucene search
+L

EUVD-2024-19958

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 22 Views

Nextcloud server OAuth codes did not expire in affected versions, allowing unauthenticated access.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
Nextcloud Server Session Expiration Bypass
25 Jan 202400:00
–bdu_fstec
circl
Circl
CVE-2024-22403
18 Jan 202421:26
–circl
cnnvd
CNNVD
Nextcloud Code Issues Vulnerabilities
18 Jan 202400:00
–cnnvd
cve
CVE
CVE-2024-22403
18 Jan 202420:03
–cve
cvelist
Cvelist
CVE-2024-22403 OAuth2 authorization codes are valid indefinetly in Nextcloud server
18 Jan 202420:03
–cvelist
fedora
Fedora
[SECURITY] Fedora 38 Update: nextcloud-28.0.4-2.fc38
1 May 202401:38
–fedora
nessus
Tenable Nessus
Fedora 38 : nextcloud (2024-d67f9827b2)
1 May 202400:00
–nessus
nextcloud
Nextcloud
OAuth2 authorization codes are valid indefinetly
18 Jan 202408:39
–nextcloud
hackerone
Hacker One
Nextcloud: OAuth2 "authorization_code" is valid indefinetly
25 Nov 202211:50
–hackerone
mend
Mend
CVE-2024-22403
18 Jan 202420:03
–mend
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "27e2fc87-d27f-3467-b9ba-2da1df744c25",
        "vendor": {
          "name": "nextcloud"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2b22f9d8-bdfb-38a3-b60b-124fc3f79c54",
        "product": {
          "name": "security-advisories"
        }
      },
      {
        "id": "94d11952-b800-3434-9cc5-8a7421219214",
        "product": {
          "name": "security-advisories"
        },
        "product_version": "< 28.0.0"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
5.4Medium risk
Vulners AI Score5.4
CVSS 3.13 - 3.7
EPSS0.00452
22