CVE-2016-7419: XSS
First published: Sat Sep 17 2016(Updated: )
Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nextcloud Server | <=9.0.51 | |
| ownCloud | <=9.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-7419?
CVE-2016-7419 has a medium severity level due to its potential impact from cross-site scripting attacks.
How do I fix CVE-2016-7419?
To fix CVE-2016-7419, upgrade OwnCloud Server to version 9.0.4 or higher, or Nextcloud Server to version 9.0.52 or higher.
Who is affected by CVE-2016-7419?
CVE-2016-7419 affects remote authenticated users of OwnCloud Server versions prior to 9.0.4 and Nextcloud Server versions prior to 9.0.52.
What kind of vulnerability is CVE-2016-7419?
CVE-2016-7419 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
What applications are vulnerable due to CVE-2016-7419?
The vulnerable applications due to CVE-2016-7419 are the gallery application in OwnCloud Server and Nextcloud Server.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/references
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/nextcloud
- canonical/nextcloud server
- version/nextcloud server/9.0.51
- vendor/owncloud
- canonical/owncloud
- version/owncloud/9.0.3