CVE-2017-0890

CVE-2017-0890

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

EPSS 0.7%

Published

2017-05-08T20:00:00.000Z

Updated

2024-08-05T13:18:06.510Z

Stack: applications

Check your server →