Description

The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to obtain sensitive information via unspecified vectors.

Remediation

References

CVE-2017-5866

Related Vulnerabilities

WordPress Plugin Social Share Icons & Social Share Buttons Cross-Site Scripting (3.0.5)

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-35613)

PHP Other Vulnerability (CVE-2007-1890)

WordPress Plugin Cryptocurrency Widgets Pack SQL Injection (1.8.1)

WordPress Plugin Image Slider Cross-Site Scripting (1.1.5)

Severity

Medium

Classification

CVE-2017-5866 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities