CVE-2017-8896
17.07.2017, 21:29
ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters.
| Vendor | Product | Version |
|---|---|---|
| owncloud | owncloud | 𝑥 ≤ 8.2.11 |
| owncloud | owncloud | 9.0.0 ≤ 𝑥 ≤ 9.0.9 |
| owncloud | owncloud | 9.1.0 < 𝑥 ≤ 9.1.5 |
| owncloud | owncloud | 10.0.0 ≤ 𝑥 < 10.0.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases