Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-0888

No fix known EPSS 2%

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information.

Published 2017-04-05 · CVE record · OSV

Products: nextcloud_server