SUSE CVE-2023-28848

useroidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effectively allowed an attacker to bypass the state protection as they could just copy the expected state token from the first request to their second...

CVE-2023-28848

useroidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effectively allowed an attacker to bypass the state protection as they could just copy the expected state token from the first request to their second...

CVE-2023-28848: Cross-Site Request Forgery (CSRF)

useroidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effectively allowed an attacker to bypass the state protection as they could just copy the expected state token from the first request to their second...

PT-2023-22005

Name of the Vulnerable Software and Affected Versions user oidc versions 1.0.0 through 1.3.0 Description A vulnerability in user oidc, the OIDC connect user backend for Nextcloud, an open source collaboration platform, allowed an attacker to bypass the state protection. This was possible because ...

PT-2020-13239

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 software Description An issue allows attackers to bypass the locked-state protection mechanism and designate a different preferred SIM card. Recommendations For Samsung mobile devices with Q10.0 software, at t...

PT-2020-13236

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 software Description An issue allows attackers to bypass the locked-state protection mechanism and access clipboard content via USSD. Recommendations For Samsung mobile devices with Q10.0 software, at the...

CVE-2020-12745: Missing Authorization

An issue was discovered on Samsung mobile devices with Q10.0 software. Attackers can bypass the locked-state protection mechanism and access clipboard content via USSD. The Samsung ID is SVE-2019-16556 May 2020...

CVE-2020-12748: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with Q10.0 software. Attackers can bypass the locked-state protection mechanism and designate a different preferred SIM card. The Samsung ID is SVE-2020-16594 May 2020...