XSS Vulnerability in ownCloud Server Versions 8.2.12, 9.0.x, 9.1.x, and 10.0.x

XSS Vulnerability in ownCloud Server Versions 8.2.12, 9.0.x, 9.1.x, and 10.0.x

CVE-2017-8896 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters.

Learn more about our Cis Benchmark Audit For Server Software.