CVE-2017-8896 | BDVDB-2026-87775 Detail

Description#

ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://hackerone.com/reports/215410
https://owncloud.org/security/advisory/?id=oc-sa-2017-004
http://www.securityfocus.com/bid/99321

Exploit#

No public exploit known

History#

Version 12017-07-17Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.