Lucene search
Juan Pablo Lopez YacubianNC-SA-2020-027HistoryJul 10, 2020 - 12:00 a.m.
XSS in desktop client via invalid server address on login form (NC-SA-2020-027)
2020-07-1000:00:00
Juan Pablo Lopez Yacubian
nextcloud.com
24
EPSS
0.001
Percentile
26.4%
A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
Related
hackerone
hackerone
Nextcloud: XSS in desktop client via invalid server address on login form
2019-08-31 15:16:17
osv
osv
CVE-2020-8189
2020-08-21 21:15:11
debiancve
debiancve
CVE-2020-8189
2020-08-21 21:15:11
nvd
nvd
CVE-2020-8189
2020-08-21 21:15:11
cve
cve
CVE-2020-8189
2020-08-21 21:15:11
cvelist
cvelist
CVE-2020-8189
2020-08-21 20:34:54
prion
prion
Cross site scripting
2020-08-21 21:15:00
ubuntucve
ubuntucve
CVE-2020-8189
2020-08-21 00:00:00
nessus
nessus
GLSA-202009-09 : Nextcloud Desktop Sync client: Multiple vulnerabilities
2020-09-14 00:00:00
gentoo
gentoo
Nextcloud Desktop Sync client: Multiple vulnerabilities
2020-09-13 00:00:00