CSRF in Nextcloud Security-Advisories
CVE-2023-28848
user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effectively allowed an attacker to bypass the state protection as they could just copy the expected state token from the first request to their second request. Users should upgrade user_oidc to 1.3.0 to receive a patch for the issue. No known workarounds are available.
Vulnerability class: CSRF (Cross-Site Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N.
EPSS exploit prediction
EPSS: 0.003 (23.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 24th percentile — 23.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Nextcloud Security-Advisories — versions >= 1.0.0, < 1.3.0
- Nextcloud User Oidc
Weakness classification (CWE)
References
- github.com/nextcloud/security-advisories/security/advisories/GHSA-52hv-xw32-wf7f (Vendor Advisory)
- github.com/nextcloud/user_oidc/pull/580 (Patch, Vendor Advisory)
- hackerone.com/reports/1878381 (Third Party Advisory)
Frequently asked questions
- What is CVE-2023-28848?
- CVE-2023-28848 is a medium-severity vulnerability in Nextcloud Security-Advisories, classified under Cross-Site Request Forgery (CSRF). CVSS score: 4.8/10. Published 2023-04-04.
- How severe is CVE-2023-28848?
- Medium severity. CVSS v3 base score is 4.8 out of 10.