CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
EPSS
Percentile
30.0%
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 5.0.x
before 5.0.6 allow remote authenticated users to inject arbitrary web
script or HTML via the (1) tag parameter to
apps/bookmarks/ajax/addBookmark.php or (2) dir parameter to
apps/files/ajax/newfile.php, which is passed to apps/files/js/files.js.
Author | Note |
---|---|
mdeslaur | owncloud packages in Ubuntu are now empty |