Lucene search
OwnCloudOC-SA-2013-014HistoryApr 11, 2013 - 11:42 a.m.
Server: XSS Vulnerability in jPlayer
2013-04-1111:42:22
owncloud.org
32
0.011 Low
EPSS
Percentile
82.8%
A cross-site scripting (XSS) vulnerability in all ownCloud versions prior to 5.0.5 including the 4.0.x branch allows remote attackers to execute arbitrary javascript when a user opens a special crafted URL.
This vulnerability exists in the bundled 3rdparty plugin “jPlayer”, “jPlayer” released version 2.2.20 which addresses the problem.
For more information please consult the official advisory.
This advisory is licensed CC BY-SA 4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud server | lt | 4.0.14 | |
| owncloud server | lt | 5.0.4 | |
| owncloud server | lt | 4.5.9 |
Related
securityvulns
securityvulns
Vulnerabilities in jPlayer
2013-05-06 00:00:00
packetstorm
packetstorm
jPlayer 2.2.22 XSS / Content Spoofing
2013-04-21 00:00:00
owncloud
owncloud
XSS Vulnerability in jPlayer - ownCloud
2013-04-11 17:49:52
openvas
openvas
ownCloud Multiple Vulnerabilities (oC-SA-2013-014, oC-SA-2013-015)
2014-07-03 00:00:00
prion
prion
Cross site scripting
2013-08-17 16:55:00
Cross site scripting
2013-08-15 17:55:00
Cross site scripting
2013-08-15 17:55:00
veracode
veracode
Cross-Site Scripting (XSS)
2018-11-16 07:17:37
Cross-Site Scripting (XSS)
2018-11-16 07:13:20
Cross-Site Scripting (XSS)
2018-11-16 07:06:59
cve
cve
debiancve
debiancve
osv
osv
jplayer Cross Site Scripting vulnerability
2022-05-17 04:39:22
ubuntucve
ubuntucve
github
github
jplayer Cross Site Scripting vulnerability
2022-05-17 04:39:22