CVE-2017-9338

CVE-2017-9338 is a cross-site scripting (XSS) vulnerability affecting ownCloud Server versions prior to 8.2.12, 9.0.10, 9.1.6, and 10.0.2. This medium-severity flaw (CVSS 5.4) arises from inadequate escaping in the search module, allowing an authenticated user to inject malicious content into the search dialogue. Successful exploitation requires user interaction, specifically writing or pasting malicious content into the search field, and could lead to low impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.