CVE-2012-2270

2012-04-2000:00:00

ubuntu.com

0.017 Low

EPSS

Percentile

87.6%

JSON

Open redirect vulnerability in index.php (aka the Login Page) in ownCloud
before 3.0.3 allows remote attackers to redirect users to arbitrary web
sites and conduct phishing attacks via a URL in the redirect_url parameter.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/owncloud/+bug/1004379>

Notes

Author	Note
mdeslaur	owncloud packages in Ubuntu are now empty

References

secunia.com/advisories/48850

www.tele-consulting.com/advisories/TC-SA-2012-01.txt

launchpad.net/bugs/cve/CVE-2012-2270

nvd.nist.gov/vuln/detail/CVE-2012-2270

security-tracker.debian.org/tracker/CVE-2012-2270

www.cve.org/CVERecord?id=CVE-2012-2270

0.017 Low

EPSS

Percentile

87.6%

JSON

Related for UB:CVE-2012-2270