Owncloud Server Security Vulnerabilities and Issues — Owncloud Server CVE List

Lucene search

OwncloudOwncloud Server

4 matches found

CVE•added 2012/04/20 10:55 a.m.•58 views

CVE-2012-2269

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary field to apps/contacts/ajax/addcard.php, (2) the parameter parameter to apps/contacts/ajax/addproperty.php, (3) the name parameter to apps/...

4.3CVSS5.6AI score0.00855EPSS

CVE•added 2012/04/20 10:55 a.m.•51 views

CVE-2012-2398

Cross-site scripting (XSS) vulnerability in files/ajax/download.php in ownCloud before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via the files parameter, a different vulnerability than CVE-2012-2269.4.

4.3CVSS5.6AI score0.00855EPSS

CVE•added 2012/04/20 10:55 a.m.•49 views

CVE-2012-2270

Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.

5.8CVSS6.7AI score0.23049EPSS

CVE•added 2012/04/20 10:55 a.m.•48 views

CVE-2012-2397

Cross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via vectors involving contacts.

6.8CVSS6.5AI score0.002EPSS