What’s Vulnerable › Products

nextcloud Openid Connect User Backend vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your nextcloud Openid Connect User Backend version is affected

Latest nextcloud Openid Connect User Backend vulnerabilities

• CVE-2022-39339 — Cleartext Transmission of Sensitive Information in user_oidc (CVSS 4.3)
• CVE-2022-39338 — Stored cross site scripting (XSS) vulnerability via Authorization Endpoint in user_oidc (CVSS 5.4)