CVE-2017-0888

2017-04-0520:59:00

CWE-451

CWE-20

web.nvd.nist.gov

cve-2017-0888

nextcloud server

content-spoofing

files app

vulnerability

nvd

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

CPENameOperatorVersion
nextcloud:nextcloudnextcloudle9.0.54
nextcloud:nextcloud_servernextcloud nextcloud servereq10.0.2

CPE	Name	Operator	Version
nextcloud:nextcloud	nextcloud	le	9.0.54
nextcloud:nextcloud_server	nextcloud nextcloud server	eq	10.0.2

References

www.securityfocus.com/bid/97491

hackerone.com/reports/179073

nextcloud.com/security/advisory/?id=nc-sa-2017-006