CVE-2017-9338
17.07.2017, 21:29
Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2. To be exploitable a user has to write or paste malicious content into the search dialogue.
| Vendor | Product | Version |
|---|---|---|
| owncloud | owncloud | 𝑥 < 8.2.12 |
| owncloud | owncloud | 9.0.0 ≤ 𝑥 < 9.0.10 |
| owncloud | owncloud | 9.1.0 ≤ 𝑥 < 9.1.6 |
| owncloud | owncloud | 10.0.0 ≤ 𝑥 < 10.0.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases