Skip to content
OpenAdvisories
Unscored CVE-2017-9338 EUVD-2017-18273GHSA-grv7-82j8-jg4r

Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.…

Published Jul 17, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2. To be exploitable a user has to write or paste malicious content into the search dialogue.

References