Lucene search

K
owncloudOwnCloudOC-SA-2012-007
HistoryDec 20, 2012 - 10:42 a.m.

Server: XSS vulnerability in bookmarks

2012-12-2010:42:22
owncloud.org
31

0.0004 Low

EPSS

Percentile

5.7%

A cross-site scripting (XSS) vulnerability in ownCloud before 4.5.5 and 4.0.10 allow remote attackers to inject arbitrary web script or HTML via the PATH data to index.php in apps/bookmark/


For more information please consult the official advisory.

This advisory is licensed CC BY-SA 4.0

0.0004 Low

EPSS

Percentile

5.7%