Description
Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app. The exception message displayed on the DAV endpoints contained partially user-controllable input leading to a potential misrepresentation of information.
Remediation
References
Related Vulnerabilities
WordPress Plugin Tabs Cross-Site Scripting (1.8.0)
Apache Tomcat Resource Management Errors Vulnerability (CVE-2011-4858)
WordPress Plugin Import and export users and customers Multiple Vulnerabilities (1.9.4.6)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1734)