VULNERABILITY INTELLIGENCE

CVE-2024-22212

CVSS score9.6 CRITICAL

EPSS probability0.76%

CISA KEVNot currently listed

Published2024-01-18

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

Nextcloud Global Site Selector is a tool which allows you to run multiple small Nextcloud instances and redirect users to the right server. A problem in the password verification method allows an attacker to authenticate as another user. It is recommended that the Nextcloud Global Site Selector is upgraded to version 1.4.1, 2.1.2, 2.3.4 or 2.4.5. There are no known workarounds for this issue.

Weakness classification

security-advisories@github.com: CWE-306

Primary references

security-advisories@github.com — Patch
security-advisories@github.com — Patch, Vendor Advisory
security-advisories@github.com — Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory