Server side cross-site scripting In nextcloud-desktop
Description
A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | 3.0.1-1 | ||
debian 12 | 3.0.1-1 | ||
debian 13 | 3.0.1-1 | ||
debian 11 | 3.0.1-1 |
Aliases
1. 2. 3. 4. 5.