NVD

Id
21836  
Name
CVE-2016-7419  
Description
Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-09-17  
Modified Date
2016-11-28  
Seq
2016-7419  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
117094 21836 CVE-2016-7419 92373  View
117095 21836 CVE-2016-7419 https://github.com/nextcloud/gallery/commit/6933d27afe518967bd1b60e6a7eacd88288929fc  View
117096 21836 CVE-2016-7419 https://hackerone.com/reports/145355  View
117097 21836 CVE-2016-7419 https://nextcloud.com/security/advisory/?id=nc-sa-2016-001  View
117098 21836 CVE-2016-7419 https://owncloud.org/security/advisory/?id=oc-sa-2016-011  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4034 JVNDB-2016-004807 ownCloud および Nextcloud サーバの gallery アプリケーションの share.js におけるクロスサイトスクリプティングの脆弱性 ownCloud および Nextcloud サーバの gallery アプリケーションの share.js には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-7419 93926 CVE-2016-7419 21836 3.5 5.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004807.html 2016-07-19 2016-09-21 View