Missing file type check allows malicious SVG upload for XS
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
![]() | CVE-2020-8281 | 6 Jan 202120:58 | – | cvelist |
![]() | Cross site scripting | 6 Jan 202121:15 | – | prion |
![]() | CVE-2020-8281 | 6 Jan 202121:15 | – | cve |
![]() | Nextcloud Contacts Cross-Site Scripting Vulnerability (CNVD-2021-03032) | 7 Jan 202100:00 | – | cnvd |
![]() | CVE-2020-8281 | 6 Jan 202121:15 | – | osv |
![]() | Nextcloud: XSS through image upload of contacts using svg file | 9 Jun 202021:06 | – | hackerone |
![]() | XSS through image upload of contacts using svg file (NC-SA-2020-045) | 20 Oct 202000:00 | – | nextcloud |
Source | Link |
---|---|
hackerone | www.hackerone.com/reports/894876 |
nextcloud | www.nextcloud.com/security/advisory/ |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo