Description
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app. The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2011-0838 Vulnerability (CVE-2011-0838)
Internet Information Services Other Vulnerability (CVE-1999-1233)
Python Protection Mechanism Failure Vulnerability (CVE-2016-0772)
WordPress Plugin Student Result or Employee Database Security Bypass (1.6.3)
WordPress Plugin Awesome Support-WordPress HelpDesk & Support Cross-Site Scripting (5.8.0)