Lucene search

K
nextcloudMd. Ishrat ShahriyarNC-SA-2016-003
HistoryJul 19, 2016 - 12:00 a.m.

Content-Spoofing in "files" app (NC-SA-2016-003)

2016-07-1900:00:00
Md. Ishrat Shahriyar
nextcloud.com
10

0.004 Low

EPSS

Percentile

73.7%

The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user.

CPENameOperatorVersion
nextcloud serverlt9.0.52

0.004 Low

EPSS

Percentile

73.7%