CVE-2017-8896: XSS
Published Jul 17, 2017
·Updated
ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters.
Affected Software
4 affected components
ownCloud ownCloud<=8.2.11
ownCloud ownCloud>=9.0.0<=9.0.9
ownCloud ownCloud>9.1.0<=9.1.5
ownCloud ownCloud>=10.0.0<10.0.2
Event History
Jul 17, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-8896?
CVE-2017-8896 is classified as a medium severity vulnerability due to its potential for XSS attacks.
2
How do I fix CVE-2017-8896?
To fix CVE-2017-8896, upgrade your ownCloud Server to versions 8.2.12, 9.0.10, 9.1.6, or 10.0.2 or later.
3
What types of attacks can CVE-2017-8896 enable?
CVE-2017-8896 can enable cross-site scripting (XSS) attacks that may lead to session hijacking or other malicious exploits.
4
Which versions of ownCloud are affected by CVE-2017-8896?
CVE-2017-8896 affects ownCloud Server versions below 8.2.12, 9.0.x below 9.0.10, 9.1.x below 9.1.6, and 10.0.x below 10.0.2.
5
Is there a workaround for CVE-2017-8896?
There is no known workaround for CVE-2017-8896; the recommended approach is to update to a secure version.