CVE-2017-0891CWE-79

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple…

published May 8, 2017

CVSS
—
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00643 · 49.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2017-05-08T20:00Z
EPSS history
Timeline
  • 08 MAY 20:00Z
    Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple…
    cvelistv5