NVD

Id
84025  
Name
CVE-2016-9459  
Description
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment disposition forcing the browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data in the browser as an HTML document. Thus any injected data in the log would be executed.  
Reject
 
CVSS Version
 
CVSS Score
 
Severity
 
CVSS Base Score
 
CVSS Impact Subscore
 
CVSS Exploit Subscore
 
CVSS Vector
 
Pub Date
2017-03-29  
Published
2017-03-27  
Modified Date
2017-03-27  
Seq
2016-9459  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
412258 84025 CVE-2017-6386 [oss-security] 20170301 CVE-2017-6386 Virglrenderer: memory leakage while in vrend_create_vertex_elements_state  View
412259 84025 CVE-2017-6386 96506  View
412260 84025 CVE-2017-6386 https://bugzilla.redhat.com/show_bug.cgi?id=1427472  View
412261 84025 CVE-2017-6386 https://cgit.freedesktop.org/virglrenderer/commit/?id=737c3350850ca4dbc5633b3bdb4118176ce59920  View
412262 84025 CVE-2017-6386 [oss-security] 20170301 CVE-2017-6386 Virglrenderer: memory leakage while in vrend_create_vertex_elements_state  View
412263 84025 CVE-2017-6386 96506  View
412264 84025 CVE-2017-6386 https://bugzilla.redhat.com/show_bug.cgi?id=1427472  View
412265 84025 CVE-2017-6386 https://cgit.freedesktop.org/virglrenderer/commit/?id=737c3350850ca4dbc5633b3bdb4118176ce59920  View

Related JVN