PT-2024-19280
CVE-2024-22213
·
تاريخ النشر
2024-01-18
·
تاريخ التحديث
2024-01-25
الوصف من
CVSS 3.1
0.0
غير متوفرالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Nextcloud Deck versions prior to 1.9.5
Nextcloud Deck versions prior to 1.11.2
Description
The issue allows users to be tricked into executing malicious code in their browser via HTML sent as a comment. This is a problem with the way the application handles comments, allowing for the execution of malicious HTML code.
Recommendations
For versions prior to 1.9.5, upgrade to version 1.9.5 or later.
For versions prior to 1.11.2, upgrade to version 1.11.2 or later.
As a temporary workaround, consider restricting the use of HTML in comments until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾