Lucene search
Lukas Reschke – ownCloud Inc. ([email protected]) – Vulnerability discovery and disclosure.OWNCLOUD:53F8FB11945A271F093E9BFA1AC0E39AHistoryNov 14, 2012 - 4:38 p.m.
XSS vulnerability in user_webdavauth - ownCloud
2012-11-1416:38:00
Lukas Reschke – ownCloud Inc. ([email protected]) – Vulnerability discovery and disclosure.
owncloud.org
73
0.002 Low
EPSS
Percentile
61.5%
A cross-site scripting (XSS) vulnerability in ownCloud 4.5.x before 4.5.2 allow remote attackers to inject arbitrary web script or HTML via the POST data to settings.php in apps/user_webdavauth/
Affected Software
- ownCloud Server < 4.5.2 (CVE-2012-5608)
Action Taken
It is recommended that all instances are upgraded to ownCloud Server 4.5.2.
Acknowledgements
The ownCloud team thanks the following people for their research and responsible disclosure of the above advisory:
- Lukas Reschke - ownCloud Inc. ([email protected]) - Vulnerability discovery and disclosure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud server | lt | 4.5.2 |
Related
nvd
nvd
CVE-2012-5608
2012-12-18 01:55:07
cve
cve
CVE-2012-5608
2022-10-03 16:15:31
ubuntucve
ubuntucve
CVE-2012-5608
2012-12-18 00:00:00
prion
prion
Cross site scripting
2012-12-18 01:55:00
owncloud
owncloud
Server: XSS vulnerability in user_webdavauth
2012-11-14 10:42:22
cvelist
cvelist
CVE-2012-5608
2022-10-03 16:15:31
openvas
openvas
ownCloud < 4.0.9, 4.5.x < 4.5.2 Multiple Vulnerabilities - Active Check
2013-08-21 00:00:00