Lucene search
Aliaksei PanamarenkaNC-SA-2016-009HistoryOct 10, 2016 - 12:00 a.m.
Reflected XSS in Gallery application (NC-SA-2016-009)
2016-10-1000:00:00
Aliaksei Panamarenka
nextcloud.com
9
0.002 Low
EPSS
Percentile
55.1%
The gallery app was not properly sanitizing exception messages from the Nextcloud server. Due to an endpoint where an attacker could influence the error message this lead to a reflected Cross-Site-Scripting vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud server | lt | 10.0.1 |
Related
osv
osv
CVE-2016-9466
2017-03-28 02:59:01
cve
cve
CVE-2016-9466
2017-03-28 02:59:01
prion
prion
Cross site scripting
2017-03-28 02:59:00
hackerone
hackerone
Nextcloud: Reflected XSS in Gallery App
2016-09-04 15:59:09
cvelist
cvelist
CVE-2016-9466
2017-03-28 02:46:00
nvd
nvd
CVE-2016-9466
2017-03-28 02:59:01
ubuntucve
ubuntucve
CVE-2016-9466
2017-03-28 00:00:00
openvas
openvas
Nextcloud Multiple Vulnerabilities - Linux
2017-03-30 00:00:00
Nextcloud Multiple Vulnerabilities - Windows
2017-03-30 00:00:00