Lucene search
Nikita TikhomirovNC-SA-2020-007HistoryMar 26, 2019 - 12:00 a.m.
Reflected XSS in redirect of the Updater (NC-SA-2020-007)
2019-03-2600:00:00
Nikita Tikhomirov
nextcloud.com
7
Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud server | lt | 15.0.6 | |
| nextcloud server | lt | 14.0.9 |
Related
cve
cve
CVE-2019-15618
2020-02-04 20:15:00
prion
prion
Cross site scripting
2020-02-04 20:15:00
hackerone
hackerone
Nextcloud: [Reflected XSS] In Request URL
2019-03-26 10:13:25
osv
osv
CVE-2019-15618
2020-02-04 20:15:12
openvas
openvas
Nextcloud Server < 14.0.9, < 15.0.6 XSS Vulnerability (NC-SA-2020-007)
2020-02-05 00:00:00
redhatcve
redhatcve
CVE-2019-15618
2022-05-21 00:15:43
Related for NC-SA-2020-007