vulnwire
5.3med

CVE-2016-9467

Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app.

Published 9 y ago · modified 4 mo ago · JSON

CVSS
5.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.0%
percentile 87%
Public exploits
0
none known

Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app. The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user.

Exploit prediction (EPSS)

2.97% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.05.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

  • n/a Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2

Classification

Weakness
  • CWE-451 User Interface (UI) Misrepresentation of Critical Information
  • CWE-284 Improper Access Control

References

  • github.com /nextcloud/server/commit/5dd211cc8845fd4533966bf8d7a7f2a6359ea013 · x_refsource_MISC, x_transferred
  • github.com /nextcloud/server/commit/ed0f0db5fa0aff04594cb0f973ae4c22b17a175a · x_refsource_MISC, x_transferred
  • nextcloud.com /security/advisory/?id=nc-sa-2016-010 · x_refsource_MISC, x_transferred
  • github.com /nextcloud/server/commit/df50e967dbd27b13875625b7dd3189294619b071 · x_refsource_MISC, x_transferred
  • github.com /owncloud/core/commit/768221fcf3c526c65d85f62b0efa2da5ea00bf2d · x_refsource_MISC, x_transferred
  • github.com /owncloud/core/commit/e7acbce27fa0ef1c6fe216ca67c72d86484919a4 · x_refsource_MISC, x_transferred
  • github.com /nextcloud/server/commit/c3ae21fef2880c9fe44e8fdbe1262ac7f9716f14 · x_refsource_MISC, x_transferred
  • hackerone.com /reports/154827 · x_refsource_MISC, x_transferred
  • github.com /nextcloud/server/commit/1352365e8bf5ea49da3dc82b1ccf7ddb659ae960 · x_refsource_MISC, x_transferred
  • github.com /nextcloud/server/commit/778ae8abd54c378fc4781394bbedc7a2ee3095e1 · x_refsource_MISC, x_transferred
  • owncloud.org /security/advisory/?id=oc-sa-2016-020 · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.