Lucene search
Hitman_47H1:894876HistoryJun 09, 2020 - 9:06 p.m.
Nextcloud: XSS through image upload of contacts using svg file
2020-06-0921:06:51
hitman_47
hackerone.com
$100
18
EPSS
0.001
Percentile
24.8%
This is a bypass of report #808287
Upload the attached file for the image of a contact, right click “Open image in new tab” and you will see the xss.
Impact
The person viewing the image of a contact can be victim of XSS.
Related
cvelist
cvelist
CVE-2020-8281
2021-01-06 20:58:09
osv
osv
CVE-2020-8281
2021-01-06 21:15:14
nextcloud
nextcloud
XSS through image upload of contacts using svg file (NC-SA-2020-045)
2020-10-20 00:00:00
prion
prion
Cross site scripting
2021-01-06 21:15:00
cve
cve
CVE-2020-8281
2021-01-06 21:15:14
nvd
nvd
CVE-2020-8281
2021-01-06 21:15:14