Nextcloud Contacts Application vulnerabilities

1 known vulnerability affecting nextcloud/nextcloud_contacts_application.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2018-3764MEDIUMCVSS 4.8v<2.1.22018-07-05

CVE-2018-3764 [MEDIUM] CWE-79 CVE-2018-3764: In Nextcloud Contacts before 2.1.2, a missing sanitization of search results for an autocomplete fie In Nextcloud Contacts before 2.1.2, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like admins or group admins.