CVE-2017-9338 | BDVDB-2026-87776 Detail

Description#

Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2. To be exploitable a user has to write or paste malicious content into the search dialogue.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://owncloud.org/security/advisory/?id=oc-sa-2017-007
http://www.securityfocus.com/bid/99322

Exploit#

No public exploit known

History#

Version 12017-07-17Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.