Home > Vulnerability Database > WS-2017-3791

WhiteSource Vulnerability Database

New vulnerability? Tell us about it!

WS-2017-3791

Good to know:

Date: February 16, 2017

HTML injection vulnerability in all versions of ownCloud desktop client.

Language: C++

Severity Score

7.8

Related Resources (2)

Url: https://github.com/owncloud/client/commit/8a7dfa5261fe4028f9866d2134ca5ec15b63d1e8

Url: https://www.whitesourcesoftware.com/vulnerability-database/WS-2017-3791

Severity Score

7.8

Weakness Type (CWE)

Injection

CWE-74

Top Fix

Upgrade Version

No fix version available

CVSS v3.1

Base Score:	7.8
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Do you need more information?

Contact Us