CVE-2016-9467
published 2017-03-28CVE-2016-9467: Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app. The location bar in the files…
PriorityP428medium5.3CVSS 3.0
AVNACLPRNUINSUCNILAN
EPSS
2.97%
85.5th percentile
Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app. The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nextcloud | nextcloud_server | < 9.0.54 | 9.0.54 |
| nextcloud | nextcloud_server | >= 10.0.0 < 10.0.1 | 10.0.1 |
| owncloud | owncloud | >= 9.0.0 < 9.0.6 | 9.0.6 |
| owncloud | owncloud | >= 9.1.0 < 9.1.2 | 9.1.2 |
CVSS provenance
nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/nextcloud/server/commit/1352365e8bf5ea49da3dc82b1ccf7ddb659ae960https://github.com/nextcloud/server/commit/5dd211cc8845fd4533966bf8d7a7f2a6359ea013https://github.com/nextcloud/server/commit/778ae8abd54c378fc4781394bbedc7a2ee3095e1https://github.com/nextcloud/server/commit/c3ae21fef2880c9fe44e8fdbe1262ac7f9716f14https://github.com/nextcloud/server/commit/df50e967dbd27b13875625b7dd3189294619b071https://github.com/nextcloud/server/commit/ed0f0db5fa0aff04594cb0f973ae4c22b17a175ahttps://github.com/owncloud/core/commit/768221fcf3c526c65d85f62b0efa2da5ea00bf2dhttps://github.com/owncloud/core/commit/e7acbce27fa0ef1c6fe216ca67c72d86484919a4https://hackerone.com/reports/154827https://nextcloud.com/security/advisory/?id=nc-sa-2016-010https://owncloud.org/security/advisory/?id=oc-sa-2016-020https://github.com/nextcloud/server/commit/1352365e8bf5ea49da3dc82b1ccf7ddb659ae960https://github.com/nextcloud/server/commit/5dd211cc8845fd4533966bf8d7a7f2a6359ea013https://github.com/nextcloud/server/commit/778ae8abd54c378fc4781394bbedc7a2ee3095e1https://github.com/nextcloud/server/commit/c3ae21fef2880c9fe44e8fdbe1262ac7f9716f14https://github.com/nextcloud/server/commit/df50e967dbd27b13875625b7dd3189294619b071https://github.com/nextcloud/server/commit/ed0f0db5fa0aff04594cb0f973ae4c22b17a175ahttps://github.com/owncloud/core/commit/768221fcf3c526c65d85f62b0efa2da5ea00bf2dhttps://github.com/owncloud/core/commit/e7acbce27fa0ef1c6fe216ca67c72d86484919a4https://hackerone.com/reports/154827https://nextcloud.com/security/advisory/?id=nc-sa-2016-010https://owncloud.org/security/advisory/?id=oc-sa-2016-020
2017-03-28
Published