Description

ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters.

Remediation

References

CVE-2017-8896

Related Vulnerabilities

Resin Application Server Other Vulnerability (CVE-2004-0281)

MySQL CVE-2012-3166 Vulnerability (CVE-2012-3166)

Drupal Improper Authentication Vulnerability (CVE-2006-1228)

PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-3416)

Werkzeug WSGI Insufficient Entropy Vulnerability (CVE-2019-14806)

Severity

Medium

Classification

CVE-2017-8896 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities