CVE-2016-9466: falha em Nextcloud Server & ownCloud Server Nextcloud…
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Server & ownCloud Server Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.7%
Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the Nextcloud/ownCloud server. Due to an endpoint where an attacker could influence the error message, this led to a reflected Cross-Site-Scripting vulnerability.
Produtos afetados
n/a · Nextcloud Server & ownCloud Server Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2Referências
https://github.com/nextcloud/gallery/commit/f9ef505c1d60c9041e251682e0f6b3daad952d58https://github.com/owncloud/gallery/commit/b3b3772fb9bec61ba10d357bef42b676fa474eeehttps://github.com/owncloud/gallery/commit/dc4887f1afcc0cf304f4a0694075c9364298ad8ahttps://hackerone.com/reports/165686https://nextcloud.com/security/advisory/?id=nc-sa-2016-009https://owncloud.org/security/advisory/?id=oc-sa-2016-019