Nextcloud User Oidc vulnerabilities

• nextcloud user oidc, kiteworks security-advisories +1 more Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate CVE-2026-45284 4.6 MediumJune 1, 2026
• nextcloud user oidc, kiteworks security-advisories +1 more Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass CVE-2026-45278 3.3 LowJune 1, 2026
• nextcloud user oidc, kiteworks security-advisories +1 more Nextcloud User OIDC has an open redirection when logging in with User OIDC CVE-2024-52512 3.3 LowNovember 15, 2024
• kiteworks security-advisories, nextcloud user oidc +1 more Nextcloud user_oidc's ID4me does not validate signature or expiration CVE-2024-37886 5.4 MediumJune 14, 2024
• kiteworks security-advisories, nextcloud user oidc +1 more Nextcloud user_oidc app's ID4me feature is available even when disabled CVE-2024-37312 6.3 MediumJune 14, 2024
• kiteworks security-advisories, nextcloud user oidc +1 more user_oidc app stores client secret unencrypted in database CVE-2023-39954 3.8 LowAugust 10, 2023
• kiteworks security-advisories, nextcloud user oidc +1 more Issuer not verified from obtained token in user_oidc CVE-2023-39953 4.8 MediumAugust 10, 2023
• kiteworks security-advisories, nextcloud user oidc +1 more Nextcloud user_oidc app is missing brute force protection CVE-2023-32074 8.0 HighMay 25, 2023
• kiteworks security-advisories, nextcloud user oidc +1 more CSRF protection on user_oidc login returned the expected token in case of an error CVE-2023-28848 4.8 MediumApril 4, 2023