CVE-2017-8896

MEDIUM 6.1CVE-2017-8896 · Published 17/07/2017 · updated 17/06/2026

In short

CVE-2017-8896 is a MEDIUM (CVSS 6.1) vulnerability affecting owncloud (owncloud).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.2% of all vulnerabilities.
Fix: update to 10.0.2 or later.

Package	Affected versions	Patched versions
owncloud owncloud	`≥ 10.0.0, < 10.0.2≥ 9.0.0, ≤ 9.0.9> 9.1.0, ≤ 9.1.5≤ 8.2.11`	`10.0.2`

Description

ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters.

References

securityfocus.com/bid/99321 · Third Party Advisory
hackerone.com/reports/215410 · Third Party Advisory
owncloud.org/security/advisory · Vendor Advisory

More vulnerabilities in owncloud

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

owncloud

≥ 10.0.0, < 10.0.2≥ 9.0.0, ≤ 9.0.9> 9.1.0, ≤ 9.1.5≤ 8.2.11

10.0.2

More vulnerabilities in owncloud

See all →