Lucene search

K
nextcloudTripp Lyons ([email protected])NC-SA-2020-019
HistoryMar 18, 2020 - 12:00 a.m.

XSS in Files PDF viewer (NC-SA-2020-019)

2020-03-1800:00:00
Tripp Lyons ([email protected])
nextcloud.com
47

An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF.

CPENameOperatorVersion
nextcloud serverlt18.0.3