Логотип exploitDog
bind:"GHSA-9qxg-6mvx-c4mc" OR bind:"CVE-2018-3780"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-9qxg-6mvx-c4mc" OR bind:"CVE-2018-3780"

Количество 8

Количество 8

github логотип

GHSA-9qxg-6mvx-c4mc

больше 3 лет назад

A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2018-3780

около 7 лет назад

A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2018-3780

около 7 лет назад

A missing sanitization of search results for an autocomplete field in ...

CVSS3: 5.4
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2018:4002-1

почти 7 лет назад

Security update for nextcloud

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2018:3999-1

почти 7 лет назад

Security update for nextcloud

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2018:2521-2

около 7 лет назад

Security update for nextcloud

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2018:2521-1

около 7 лет назад

Security update for nextcloud

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2018:2510-1

около 7 лет назад

Security update for nextcloud

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-9qxg-6mvx-c4mc

A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.

CVSS3: 5.4
1%
Низкий
больше 3 лет назад
nvd логотип
CVE-2018-3780

A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.

CVSS3: 5.4
1%
Низкий
около 7 лет назад
debian логотип
CVE-2018-3780

A missing sanitization of search results for an autocomplete field in ...

CVSS3: 5.4
1%
Низкий
около 7 лет назад
suse-cvrf логотип
openSUSE-SU-2018:4002-1

Security update for nextcloud

1%
Низкий
почти 7 лет назад
suse-cvrf логотип
openSUSE-SU-2018:3999-1

Security update for nextcloud

1%
Низкий
почти 7 лет назад
suse-cvrf логотип
openSUSE-SU-2018:2521-2

Security update for nextcloud

1%
Низкий
около 7 лет назад
suse-cvrf логотип
openSUSE-SU-2018:2521-1

Security update for nextcloud

1%
Низкий
около 7 лет назад
suse-cvrf логотип
openSUSE-SU-2018:2510-1

Security update for nextcloud

1%
Низкий
около 7 лет назад

Уязвимостей на страницу