Lucene search
Veracode Vulnerability DatabaseVERACODE:38335HistoryDec 05, 2022 - 5:27 a.m.
Cross-site Scripting (XSS)
2022-12-0505:27:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
cross-site scripting
nextcloud-desktop
applicationwindow
window.qml
javascript
vulnerability
EPSS
0.001
Percentile
26.4%
nextcloud-desktop is vulnerable to cross-site scripting. The vulnerability exists in ApplicationWindow function of Window.qml due to incorrectly neutralizes user-controllable input which allows an attacker to inject and execute malicious JavaScript.
Related
prion
prion
Design/Logic Flaw
2022-11-25 20:15:00
osv
osv
CVE-2022-39332
2022-11-25 20:15:10
debiancve
debiancve
CVE-2022-39332
2022-11-25 20:15:10
hackerone
hackerone
Nextcloud: XSS in Desktop Client via user status and information
2022-09-21 22:00:01
cve
cve
CVE-2022-39332
2022-11-25 20:15:10
nvd
nvd
CVE-2022-39332
2022-11-25 20:15:10
ubuntucve
ubuntucve
CVE-2022-39332
2022-11-25 00:00:00
nextcloud
nextcloud
XSS in Desktop Client via user status and information
2022-11-25 11:30:36
cvelist
cvelist
CVE-2022-39332 Cross-site scripting (XSS) in Nextcloud Desktop Client
2022-11-25 00:00:00
openvas
openvas
openSUSE: Security Advisory for nextcloud (openSUSE-SU-2023:0171-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for nextcloud (openSUSE-SU-2023:0090-1)
2024-03-04 00:00:00
nessus
nessus
openSUSE 15 Security Update : nextcloud-desktop (openSUSE-SU-2023:0171-1)
2023-07-11 00:00:00
openSUSE 15 Security Update : nextcloud-desktop (openSUSE-SU-2023:0090-1)
2023-04-13 00:00:00