CVE:CVE-2021-22878
CNNVD:CNNVD-202103-283
Nextcloud是德国Nextcloud公司的一套开源的自托管文件同步和共享的通信应用平台。
Nextcloud Server prior to 20.0.6 存在跨站脚本漏洞，该漏洞源于OC.Notification.show缺乏处理。
solution:Upgrade nextcloud nextcloud_server to a higher version than 20.0.6,and avoid the version (,20.0.6); Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34