2 matches found
CVE-2020-8155: Improper Neutralization of Input During Web Page Generation
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF...
5.4CVSS6.6AI score0.01138EPSS
SaveExploits0References3
XSS in Files PDF viewer (NC-SA-2020-019)
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF...
3.5CVSS2.2AI score0.01138EPSS
SaveExploits0Affected Software1
20