Количество 8
Количество 8
CVE-2018-3780
A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
CVE-2018-3780
A missing sanitization of search results for an autocomplete field in ...
openSUSE-SU-2018:4002-1
Security update for nextcloud
openSUSE-SU-2018:3999-1
Security update for nextcloud
openSUSE-SU-2018:2521-2
Security update for nextcloud
openSUSE-SU-2018:2521-1
Security update for nextcloud
openSUSE-SU-2018:2510-1
Security update for nextcloud
GHSA-9qxg-6mvx-c4mc
A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-3780 A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users. | CVSS3: 5.4 | 0% Низкий | почти 7 лет назад |
| CVE-2018-3780 A missing sanitization of search results for an autocomplete field in ... | CVSS3: 5.4 | 0% Низкий | почти 7 лет назад |
 | openSUSE-SU-2018:4002-1 Security update for nextcloud | 0% Низкий | больше 6 лет назад | |
| openSUSE-SU-2018:3999-1 Security update for nextcloud | 0% Низкий | больше 6 лет назад | |
| openSUSE-SU-2018:2521-2 Security update for nextcloud | 0% Низкий | почти 7 лет назад | |
| openSUSE-SU-2018:2521-1 Security update for nextcloud | 0% Низкий | почти 7 лет назад | |
| openSUSE-SU-2018:2510-1 Security update for nextcloud | 0% Низкий | почти 7 лет назад | |
| GHSA-9qxg-6mvx-c4mc A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users. | CVSS3: 5.4 | 0% Низкий | около 3 лет назад |
Уязвимостей на страницу