Back to search
CVE-2016-9466
Published: Mar 28, 2017
Modified: Aug 6, 2024
PUBLISHED
Description
Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the Nextcloud/ownCloud server. Due to an endpoint where an attacker could influence the error message, this led to a reflected Cross-Site-Scripting vulnerability.
| Vendor | Product | Versions |
|---|---|---|
n/a | Nextcloud Server & ownCloud Server Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 | affected Nextcloud Server & ownCloud Server Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 |
Weaknesses (CWE)
References
https://nextcloud.com/security/advisory/?id=nc-sa-2016-009
x_refsource_MISC
https://hackerone.com/reports/165686
x_refsource_MISC
https://owncloud.org/security/advisory/?id=oc-sa-2016-019
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now