CVE-2023-28848 MEDIUM

CVE-2023-28848: CSRF protection on user_oidc login returned the expected token in case of an error

Vendor Nextcloud
Product security-advisories
Weakness CWE-352 · CSRF
Published April 4, 2023
Last update February 11, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effectively allowed an attacker to bypass the state protection as they could just copy the expected state token from the first request to their second request. Users should upgrade user_oidc to 1.3.0 to receive a patch for the issue. No known workarounds are available.

Key dates

02Disclosure timeline

April 4, 2023 CVE published
February 11, 2025 Record updated