Lucene search
PRIOn knowledge basePRION:CVE-2018-3764HistoryJul 05, 2018 - 4:29 p.m.
Cross site scripting
2018-07-0516:29:00
PRIOn knowledge base
www.prio-n.com
4
In Nextcloud Contacts before 2.1.2, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like admins or group admins.
Related
nextcloud
nextcloud
Stored XSS in contacts via group shares (NC-SA-2018-005)
2018-06-21 00:00:00
nvd
nvd
CVE-2018-3764
2018-07-05 16:29:00
osv
osv
CVE-2018-3764
2018-07-05 16:29:00
cve
cve
CVE-2018-3764
2018-07-05 16:29:00
cvelist
cvelist
CVE-2018-3764
2018-07-05 16:00:00