Unscored CVE-2017-0891 EUVD-2017-1244GHSA-qxf8-5jgm-xwxj

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilit…

Published May 8, 2017 · Updated Aug 5, 2024 · Assigned by hackerone

Vendor: Nextcloud Product: Nextcloud Server Category: Web / CMS

Description

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components.

Affected products

Vendor	Product	Affected	Fixed
Nextcloud	Nextcloud Server	before 9.0.58 and 10.0.5 and 11.0.3	—

References

https://nextcloud.com/security/advisory/?id=nc-sa-2017-008
https://hackerone.com/reports/216812