Vulnerability Name:

CVE-2016-9466 (CCN-123844)

Assigned:2016-10-10
Published:2016-10-10
Updated:2019-10-09
Summary:Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the Nextcloud/ownCloud server. Due to an endpoint where an attacker could influence the error message, this led to a reflected Cross-Site-Scripting vulnerability.
CVSS v3 Severity:6.1 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
5.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:H/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
6.1 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
5.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:H/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
5.5 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-79
Vulnerability Consequences:Cross-Site Scripting
References:Source: MITRE
Type: CNA
CVE-2016-9466

Source: XF
Type: UNKNOWN
nextcloud-owncloud-cve20169466-xss(123844)

Source: MISC
Type: Issue Tracking, Patch, Third Party Advisory
https://github.com/nextcloud/gallery/commit/f9ef505c1d60c9041e251682e0f6b3daad952d58

Source: MISC
Type: Issue Tracking, Patch, Third Party Advisory
https://github.com/owncloud/gallery/commit/b3b3772fb9bec61ba10d357bef42b676fa474eee

Source: MISC
Type: Issue Tracking, Patch, Third Party Advisory
https://github.com/owncloud/gallery/commit/dc4887f1afcc0cf304f4a0694075c9364298ad8a

Source: MISC
Type: Exploit, Third Party Advisory
https://hackerone.com/reports/165686

Source: CCN
Type: nextCloud Security Advisory NC-SA-2016-009
Reflected XSS in Gallery application

Source: MISC
Type: Patch, Vendor Advisory
https://nextcloud.com/security/advisory/?id=nc-sa-2016-009

Source: CCN
Type: ownCloud Security Advisory oC-SA-2016-019
Reflected XSS in Gallery application

Source: MISC
Type: Patch, Vendor Advisory
https://owncloud.org/security/advisory/?id=oc-sa-2016-019

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2016-9466

Vulnerable Configuration:Configuration 1:
  • cpe:/a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:* (Version >= 10.0.0 and < 10.0.1)
  • OR cpe:/a:owncloud:owncloud:*:*:*:*:*:*:*:* (Version >= 9.0.0 and < 9.0.6)
  • OR cpe:/a:owncloud:owncloud:*:*:*:*:*:*:*:* (Version >= 9.1.0 and < 9.1.2)

    • Configuration CCN 1:
  • cpe:/a:nextcloud:nextcloud_server:10.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:owncloud:owncloud_server:9.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:owncloud:owncloud_server:9.0.5:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:com.ubuntu.precise:def:20169466000
    V
    		CVE-2016-9466 on Ubuntu 12.04 LTS (precise) - medium.
    2017-03-27
    oval:com.ubuntu.trusty:def:20169466000
    V
    		CVE-2016-9466 on Ubuntu 14.04 LTS (trusty) - medium.
    2017-03-27
    BACK
    nextcloud nextcloud server *
    owncloud owncloud *
    owncloud owncloud *
    nextcloud nextcloud server 10.0.0
    owncloud owncloud server 9.1.1
    owncloud owncloud server 9.0.5