Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 Nextcloud: Stored XSS in collabora via user name
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 Nextcloud: Stored XSS in collabora via user name


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vulners.com


image
Affected: collabora and nextcloud Ubuntu 18.04.5 LTS Nextcloud 19.0.1 snap version collabora (CODE) The name of the user is displayed when him joins to edit the document allowing the attacker trigger xss. Impact Set the name of the attacker account to Create a new document → share the document with admin or another victim → the document will appear automatically in the files of the victim as shared The attacker opens the document and waits until the victim also opens the document when opening it the payload is executed ... ...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 Nextcloud: Stored XSS in collabora via user name


📈 66.06 Punkte

📌 Collabora Productivity announces a new major release - Collabora Office 6.0


📈 34.55 Punkte

📌 [webapps] Task Management System 1.0 - 'First Name and Last Name' Stored XSS


📈 32.15 Punkte

📌 #0daytoday #Task Management System 1.0 - (First Name and Last Name) Stored XSS Vulnerability [#0day #Exploit]


📈 32.15 Punkte

📌 [webapps] Customer Support System 1.0 - "First Name" & "Last Name" Stored XSS


📈 32.15 Punkte

📌 #0daytoday #Customer Support System 1.0 - First Name & Last Name Stored XSS Vulnerabili [#0day #Exploit]


📈 32.15 Punkte

📌 Nextcloud: XSS in Desktop Client via user status and information


📈 32.03 Punkte

📌 WordPress: Stored XSS on byddypress Plug-in via groups name


📈 31.21 Punkte

📌 lemlist: stored xss via Campaign Name.


📈 31.21 Punkte

📌 Shopify: Blind Stored XSS Via Staff Name


📈 31.21 Punkte

📌 Logitech: Stored XSS on oslo.io in notifications via project name change


📈 31.21 Punkte

📌 Nextcloud: Reflected XSS vulnerability with full CSP bypass in Nextcloud installations using recommended bundle


📈 30.99 Punkte

📌 FetLife: Stored XSS via Angular Expression injection via Subject while starting conversation with other users.


📈 30.27 Punkte

📌 XSS-LOADER - XSS Payload Generator / XSS Scanner / XSS Dork Finder


📈 29.79 Punkte

📌 CVE-2022-3518 | SourceCodester Sanitization Management System 1.0 User Creation First Name/Middle Name/Last Name cross site scripting


📈 29.65 Punkte

📌 CVE-2024-0782 | CodeAstro Online Railway Reservation System 1.0 pass-profile.php First Name/Last Name/User Name cross site scripting


📈 29.65 Punkte

📌 Artikel: Collabora – so klappt die Zusammenarbeit im Online-Office von Nextcloud


📈 29.05 Punkte

📌 Making Collabora Online trivial to setup [using a new PHP proxying protocol and appimage bundled into a single-click installable Nextcloud app]


📈 29.05 Punkte

📌 CVE-2023-25150 | Nextcloud Office Richdocuments Collabora access control (GHSA-64xc-r58v-53gj)


📈 29.05 Punkte

📌 Nextcloud 11, Collabora Online 2.0 Allow Collaborative Editing from Shared Links


📈 29.05 Punkte

📌 Nextcloud 11, Collabora Online 2.0 Allow Collaborative Editing from Shared Links


📈 29.05 Punkte

📌 Is there any way of storing user name and passwords on a 'secure element', some type of secure chip rather than in the software of the browser if wanting to store user name and password for easy access to certain accounts?


📈 27.5 Punkte

📌 CVE-2022-39346 | Nextcloud Server prior 22.2.10/23.0.7/24.0.3 User Display Name resource consumption (GHSA-6w9f-jgjx-4vj6)


📈 25.52 Punkte

📌 PHP Scripts Mall Advance B2B Script 2.1.4 FIRST NAME/LAST NAME Stored cross site scripting


📈 24.7 Punkte

📌 Sichere Dokumentenfreigabe in ownCloud via Collabora


📈 24.28 Punkte

📌 [APPSEC-1545] Stored XSS through customer group name in admin panel


📈 24.2 Punkte

📌 Mail.ru: Blind XSS Stored On Admin Panel Through Name Parameter In [ https://technoatom.mail.ru/]


📈 24.2 Punkte

📌 Localize: Stored XSS in Name of Team Member Invitation


📈 24.2 Punkte

📌 Shopify: Stored XSS in my staff name fired in another your internal panel


📈 24.2 Punkte

📌 [APPSEC-1885] Stored XSS in Product Name field


📈 24.2 Punkte

📌 Mapbox: Stored XSS | api.mapbox.com | IE 11 | Styles name


📈 24.2 Punkte

📌 [webapps] Courier Management System 1.0 - 'First Name' Stored XSS


📈 24.2 Punkte

📌 #0daytoday #Courier Management System 1.0 - (First Name) Stored XSS Vulnerability [#0day #Exploit]


📈 24.2 Punkte

📌 [webapps] Content Management System 1.0 - 'First Name' Stored XSS


📈 24.2 Punkte

📌 #0daytoday #Content Management System 1.0 - (First Name) Stored XSS Vulnerability [#0day #Exploit]


📈 24.2 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software