PT-2014-2445

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.5.x through 4.5.6 Description The issue allows remote attackers to hijack the authentication of users for various requests. This can be achieved through multiple cross-site request forgery CSRF vulnerabilities. Specifically...

PT-2013-6358

Name of the Vulnerable Software and Affected Versions OwnCloud versions prior to 5.0.9 Description The issue involves an XSS vulnerability in the "Share Interface" and an authentication bypass in the "user webdavauth" component. This update fixes these issues, as well as several other bugs...

PT-2012-6055

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.5.x through 4.5.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via arbitrary POST parameters. This affects the apps/user webdavauth/settings.php file...