CVE-2023-39954

user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, an attacker that obtained at least read access to a snapshot of the database can impersonate the Nextcloud server towards linked servers. user_oidc 1.3.3 contains a patch. No known workarounds are available.

• CWE-311

• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3f92-5c8p-f6gqPatch, Vendor Advisory
• https://github.com/nextcloud/user_oidc/pull/636Patch
• https://hackerone.com/reports/1994328Permissions Required
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3f92-5c8p-f6gqPatch, Vendor Advisory
• https://github.com/nextcloud/user_oidc/pull/636Patch
• https://hackerone.com/reports/1994328Permissions Required

Published

Aug 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39949eprosima Fast DDS is a C++ implementation of the Data Distri…7.5
• CVE-2023-3995Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-39950efibootguard is a simple UEFI boot loader with support for s…5.2
• CVE-2023-39951OpenTelemetry Java Instrumentation provides OpenTelemetry au…6.5
• CVE-2023-39952Nextcloud Server provides data storage for Nextcloud, an ope…6.5
• CVE-2023-39953user_oidc provides the OIDC connect user backend for Nextclo…4.8
• CVE-2023-39955Notes is a note-taking app for Nextcloud, an open-source clo…6.1
• CVE-2023-39956Electron is a framework which lets you write cross-platform …6.6
• CVE-2023-39957Nextcloud Talk Android allows users to place video and audio…7.8
• CVE-2023-39958Nextcloud Server provides data storage for Nextcloud, an ope…5.3
• CVE-2023-39959Nextcloud Server provides data storage for Nextcloud, an ope…5.3
• CVE-2023-3996The ARMember Lite - Membership Plugin for WordPress is vulne…4.8