CVE-2017-9338: XSS
First published: Mon Jul 17 2017(Updated: )
Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2. To be exploitable a user has to write or paste malicious content into the search dialogue.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ownCloud ownCloud | <8.2.12 | |
| ownCloud ownCloud | >=9.0.0<9.0.10 | |
| ownCloud ownCloud | >=9.1.0<9.1.6 | |
| ownCloud ownCloud | >=10.0.0<10.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- vendor/owncloud
- canonical/owncloud owncloud
- version/owncloud owncloud/9.0.0
- version/owncloud owncloud/9.1.0
- version/owncloud owncloud/10.0.0