CVE-2016-7419
Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name.
- Affected products
- Nextcloud Server, Owncloud Server
- Nextcloud Nextcloud Server
- ≤ 9.0.51
- Owncloud
- ≤ 9.0.3
- Fix
- Available
- CVSS 3.0
- 5.4 MEDIUM
- EPSS
- 1.4% (69th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2016-09-17
CVE-2016-7419 at NVD
No indexed exploits for CVE-2016-7419 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2016-7419 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.