CVE-2022-39331
Cross-site Scripting (XSS) in Nexcloud Desktop Client
Résumé
Cross-site Scripting (XSS) in Nexcloud Desktop Client
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application in the notifications. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-39331 nextcloud-desktop Corrigé dans: 3.1.1-2+deb11u2
- Ubuntu UBUNTU-CVE-2022-39331 nextcloud-desktop
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web hackerone.com
- web lists.debian.org