[Bug 1162779] VUL-1: CVE-2019-15618: nextcloud: Missing escaping of HTML in the Updater allowed a reflected XSS when starting the updater from a malicious location.

http://bugzilla.opensuse.org/show_bug.cgi?id=1162779 http://bugzilla.opensuse.org/show_bug.cgi?id=1162779#c1 Robert Frohl <rfrohl@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |INVALID --- Comment #1 from Robert Frohl <rfrohl@suse.com> --- already fixed in all shipped versions -- You are receiving this mail because: You are on the CC list for the bug.