CVE-2017-0891

No fix known EPSS <1%

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components.

Published 2017-05-08 · CVE record · OSV

Products: nextcloud_server