PT-2017-10692 · Nextcloud · Nextcloud Server

Publicado 2017-05-08 · Atualizado 2019-10-09 · CVE-2017-0891

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 9.0.58 Nextcloud Server versions prior to 10.0.5 Nextcloud Server versions prior to 11.0.3

Description The issue is related to inadequate escaping of error messages, leading to XSS vulnerabilities in multiple components.

Recommendations For versions prior to 9.0.58, update to version 9.0.58 or later. For versions prior to 10.0.5, update to version 10.0.5 or later. For versions prior to 11.0.3, update to version 11.0.3 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-0891

Produtos afetados

Nextcloud Server

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-0891 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-0891 · Aviso do Fabricante
• https://nextcloud.com/security/advisory/?id=nc-sa-2017-008 · Aviso do Fabricante
• https://hackerone.com/reports/216812 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0891 · Nota