nextcloud/gallery

nextcloud/gallery

Releases495

Frequency4 days 16 hours

Last Release over 5 years ago

Stars110

DEPRECATED Gallery app was replaced by Photos

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2016-9466 ↗	Mar 28, 2017Tuesday, 28 March 2017, 02:59	—	4.3 MEDIUM
Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the Nextcloud/ownCloud server. Due to an endpoint where an attacker could influence the error message, this led to a reflected Cross-Site-Scripting vulnerability.
CVE-2016-7419 ↗	Sep 17, 2016Saturday, 17 September 2016, 21:59	—	3.5 LOW
Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name.