Nextcloud CVE-2017-0893 HTML Injection Vulnerability

Bugtraq ID:	98423
Class:	Input Validation Error
CVE:	CVE-2017-0893
Remote:	Yes
Local:	No
Published:	May 08 2017 12:00AM
Updated:	May 23 2017 04:25PM
Credit:	Lukas Reschke
Vulnerable:	Nextcloud Nextcloud 10.0.1 Nextcloud Nextcloud 9.0.52 Nextcloud Nextcloud 9.0.51 Nextcloud Nextcloud 9.0.54 Nextcloud Nextcloud 11.0 Nextcloud Nextcloud 10.0.0
Not Vulnerable:	Nextcloud Nextcloud 11.0.3 Nextcloud Nextcloud 10.0.5 Nextcloud Nextcloud 9.0.58

Nextcloud CVE-2017-0893 HTML Injection Vulnerability

Nextcloud is prone to an HTML-injection vulnerability because they fail to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Versions prior to Nextcloud 11.0.3, 10.0.5 and 9.0.58 are vulnerable.

Nextcloud CVE-2017-0893 HTML Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Nextcloud CVE-2017-0893 HTML Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Nextcloud CVE-2017-0893 HTML Injection Vulnerability

References:

• Nextcloud Homepage (Nextcloud)
  
• Stored XSS in Gallery application (NC-SA-2017-010) (Nextcloud)