Lucene search
Lukas Reschke – ownCloud Inc. ([email protected]) – Vulnerability discovery and disclosure.OWNCLOUD:3D57FA6409BC94A77455FC634F8918AAHistoryJul 04, 2012 - 5:25 p.m.
Multiple stored XSS - ownCloud
2012-07-0417:25:57
Lukas Reschke – ownCloud Inc. ([email protected]) – Vulnerability discovery and disclosure.
owncloud.org
37
EPSS
0.002
Percentile
57.9%
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via
- the calendar displayname to part.choosecalendar.rowfields.php
- part.choosecalendar.rowfields.shared.php in apps/calendar/templates/
- unspecified vectors to apps/contacts/lib/vcard.php
Affected Software
- ownCloud Server < 4.0.1 (CVE-2012-4395)
Action Taken
It is recommended that all instances are upgraded to ownCloud Server 4.0.1.
Acknowledgements
The ownCloud team thanks the following people for their research and responsible disclosure of the above advisory:
- Lukas Reschke - ownCloud Inc. ([email protected]) - Vulnerability discovery and disclosure.
Related
cve
cve
CVE-2012-4395
2012-09-05 23:55:03
owncloud
owncloud
Multiple reflected XSS - ownCloud
2012-07-11 17:24:59
Server: Multiple reflected XSS
2012-07-11 11:42:22
Server: Multiple stored XSS
2012-07-04 11:42:22
ubuntucve
ubuntucve
CVE-2012-4395
2012-09-05 00:00:00
openvas
openvas
ownCloud < 4.0.3 XSS Vulnerability (oC-SA-2012-019)
2021-09-21 00:00:00
nvd
nvd
CVE-2012-4395
2012-09-05 23:55:03
prion
prion
Cross site scripting
2012-09-05 23:55:00
cvelist
cvelist
CVE-2012-4395
2012-09-05 23:00:00