Nextcloud: Possible RCE

Hello, I just quickly took a glance, I am not entirely sure or didn't get a chance to test it but it seems there are some serious bugs. In /apps/userldap/ajax/wizard.php: php 36: $action = string$POST'action'; and it is called in multiple places. including line 83 & 99. one being $action$loginNam...

CVE-2023-41087

...

CVE-2023-45211

...

CVE-2023-45211

This CVE ID has been rejected by its Numbering Authority as unused; it does not represent an active vulnerability.

CVE-2023-41087

This CVE ID has been rejected as unused by its CNA and does not represent an active vulnerability entry.