owncloud/gallery

Releases282

Frequency1 week 2 days

Last Release over 4 years ago

Stars88

:sunrise: Gallery app for ownCloud, which includes previews for all supported media files

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2016-9466 ↗	Mar 28, 2017Tuesday, 28 March 2017, 02:59	—	4.3 MEDIUM
Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the Nextcloud/ownCloud server. Due to an endpoint where an attacker could influence the error message, this led to a reflected Cross-Site-Scripting vulnerability.