Lucene search
GoogleOSV:CVE-2018-3781HistoryAug 13, 2018 - 7:29 p.m.
CVE-2018-3781
2018-08-1319:29:01
Google
osv.dev
7
A missing sanitization of search results for an autocomplete field in NextCloud Talk <3.2.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
Related
cvelist
cvelist
CVE-2018-3781
2018-08-13 19:00:00
prion
prion
Cross site scripting
2018-08-13 19:29:00
nvd
nvd
CVE-2018-3781
2018-08-13 19:29:01
cve
cve
CVE-2018-3781
2018-08-13 19:29:01
nextcloud
nextcloud
Stored XSS in autocomplete suggestions for chat @-mentions (NC-SA-2018-009)
2018-08-10 00:00:00
hackerone
hackerone
Nextcloud: HTML injection with AutoComplete suggestions
2018-07-18 13:45:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1983
2021-07-02 18:14:14