CVE-2017-0888CWE-451

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app

published April 5, 2017

CVSS
—
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01537 · 74.5th percentile
Weakness
CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published
2017-04-05T20:00Z
EPSS history
Timeline
  • 05 APR 20:00Z
    Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app
    cvelistv5