Описание
Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location.
Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location.
EPSS
Процентиль: 51%
0.00729
Низкий
CVE ID
Связанные уязвимости
CVSS3: 4.8
nvd
больше 6 лет назад
Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location.
CVSS3: 4.8
debian
больше 6 лет назад
Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a ...
EPSS
Процентиль: 51%
0.00729
Низкий