Описание
A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| nextcloud-desktop | fixed | 3.0.1-1 | package | |
| nextcloud-desktop | no-dsa | buster | package |
Примечания
https://nextcloud.com/security/advisory/?id=NC-SA-2020-027
EPSS
Связанные уязвимости
A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
ALT-PU-2020-2776: package `nextcloud-client` update to version 3.0.1-alt1
EPSS