Security Advisory

CVE-2017-0888

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-05 20:00:00
Last updated 2024-08-05 13:18:06
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information.