3 matches found
CVE-2020-8155: Improper Neutralization of Input During Web Page Generation
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF...
PT-2020-19990
Name of the Vulnerable Software and Affected Versions Nextcloud Server version 18.0.2 Description The issue is caused by an outdated 3rd party library in the Files PDF viewer, leading to a Cross-site scripting vulnerability when opening a malicious PDF. Recommendations For Nextcloud Server versio...
XSS in Files PDF viewer (NC-SA-2020-019)
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF...