Lucene search

K
nextcloudTim CoenNC-SA-2020-009
HistoryJul 29, 2019 - 12:00 a.m.

Improper neutralization of item names in projects feature (NC-SA-2020-009)

2019-07-2900:00:00
Tim Coen
nextcloud.com
10

EPSS

0.001

Percentile

38.7%

Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in a project.

EPSS

0.001

Percentile

38.7%