Medium severity6.1NVD Advisory· Published Jul 17, 2017· Updated Jun 17, 2026

CVE-2017-8896

Description

ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters.

Affected products

OwnCloud/Owncloud
cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
Range: <=8.2.11

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/99321nvdThird Party AdvisoryVDB Entry
hackerone.com/reports/215410nvdThird Party Advisory
owncloud.org/security/advisory/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000