Skip to content
OpenAdvisories
Unscored CVE-2017-0888 EUVD-2017-1242GHSA-vm7h-q75f-9ph4

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displaye…

Published Apr 5, 2017 · Updated Aug 5, 2024 · Assigned by hackerone

Description

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information.

Affected products

VendorProductAffectedFixed
Nextcloud Nextcloud Server All versions before 9.0.55 and 10.0.2 —

References