Lucene search

K
owncloudOwnCloudOC-SA-2012-003
HistoryNov 14, 2012 - 10:42 a.m.

Server: XSS vulnerability in user_webdavauth

2012-11-1410:42:22
owncloud.org
25

0.002 Low

EPSS

Percentile

61.5%

A cross-site scripting (XSS) vulnerability in ownCloud 4.5.x before 4.5.2 allow remote attackers to inject arbitrary web script or HTML via the POST data to settings.php in apps/user_webdavauth/


For more information please consult the official advisory.

This advisory is licensed CC BY-SA 4.0

CPENameOperatorVersion
owncloud serverlt4.5.2

0.002 Low

EPSS

Percentile

61.5%