medium5.4
CVE-2017-9338
Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before…
Impact
Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2. To be exploitable a user has to write or paste malicious content into the search dialogue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud | before 8.2.12 from 9.0.0 before 9.0.10 from 9.1.0 before 9.1.6 from 10.0.0 before 10.0.2 |