Description (CNA)
ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://hackerone.com/reports/215410
- https://owncloud.org/security/advisory/?id=oc-sa-2017-004
- http://www.securityfocus.com/bid/99321
ADP enrichment
No English description supplied.