CVE-2024-22400

    Dashboard / Vulnerabilities / CVE-2024-22400

    CVE-2024-22400

    Published: 18 Jan 2024Last Modified: 12 Aug 2026

    Summary: Open redirect in user_saml via RelayState parameter in Nextcloud User Saml

    Details: Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server and end up on a uncontrolled thirdparty server. It is recommended that the User Saml app is upgraded to version 5.1.5, 5.2.5, or 6.0.1. There are no known workarounds for this issue.

    References: https://hackerone.com/reports/2263044, https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22400.json, https://github.com/nextcloud/security-advisories/security/advisories/GHSA-622q-xhfr-xmv7, https://nvd.nist.gov/vuln/detail/CVE-2024-22400, https://github.com/nextcloud/user_saml/commit/b184304a476deeba36e92b70562d5de7c2f85f8a, https://github.com/nextcloud/user_saml/pull/788

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 3ae2107e258cc6005ab125a67b27d338dc4b6a57
    Fixed -50396c39aba1c34373512f0e2fa66e0e55e15e8d

    Affected versions

    6.0.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-22400 | CVE-DB