地图 / HTML Injection in Owncloud

HTML Injection in Owncloud

注入与走私 / 资源注入 / #215410

厂商: ownCloud
严重程度: 低危 · CVSS 5.4
赏金: $150
弱点: 资源注入
研究员: @sinkmanu
披露日期: 2017-07-06
资产: —
CVE: —

该报告还没有中文解读。

时间线

2017-03-22报告提交
2017-07-06公开披露

阅读 HackerOne 原文 ↗作者 @sinkmanu · 版权归作者与 ownCloud 所有

同类报告

Arbitrary local system file read on open-xchange serverOpen-Xchange · — · $2,000 Nextcloud Desktop Client RCE via malicious URI schemesNextcloud · 2021-04-15 · $1,000 [Xenoblade Chronicles X: Definitive Edition] Unrestricted RPCs allow DoS and writing arbitrary flags remotelyNintendo · 2025-05-15 HTML injection possible with soft email confirmations when Administrator manually confirms attacker email addressGitLab · 2024-10-08 · $1,060 Content injection in Jira issue title enabling sending arbitrary POST request as victimGitLab · 2022-09-22 Arbitrary POST request as victim user from HTML injection in Jupyter notebooksGitLab · 2022-05-20