Lucene search

K
nextcloudLmxNC-SA-2016-010
HistoryOct 10, 2016 - 12:00 a.m.

Content-Spoofing in "files" app (NC-SA-2016-010)

2016-10-1000:00:00
lmx
nextcloud.com
14

EPSS

0.005

Percentile

75.9%

The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user.

EPSS

0.005

Percentile

75.9%