Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Nextcloud Server HTML injection in search UI when selecting a circle with HTML in the display name
Vulnerability Description
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, an attacker could insert links into circles name that would be opened when clicking the circle name in a search filter. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app circles.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Nextcloud 安全漏洞
Vulnerability Description
Nextcloud是德国Nextcloud公司的一套开源的自托管文件同步和共享的通信应用平台。 Nextcloud Server存在安全漏洞，该漏洞源于允许攻击者在search UI中注入HTML代码。受影响的产品和版本：Nextcloud Server 25.0.13之前的25.0.0版本，26.0.8之前的26.0.0版本，27.1.3之前的27.0.0版本；Nextccloud Enterprise Server 25.0.13之前的25.0.0版本，26.0.8之前的26.0.0版本，27.1.3
CVSS Information
N/A
Vulnerability Type
N/A