Lucene search

NextcloudGHSA-52HV-XW32-WF7F

HistoryApr 04, 2023 - 8:03 a.m.

CSRF protection on user_oidc login returned the expected token in case of an error

2023-04-0408:03:46

github.com

csrf protection

user_oidc

upgrade

hackerone

pullrequest

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

26.2%

JSON

Description

Impact

This effectively allowed an attacker to bypass the state protection as they could just copy the expected state token from the first request to their second request.

Patches

It is recommended that the user_oidc is upgraded to 1.3.0.

Workarounds

No workaround available

References

Are there any links users can visit to find out more?

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

26.2%

JSON

Related for GHSA-52HV-XW32-WF7F