CVE-2013-2042
Published: 14 March 2014
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bookmarks/ajax/editBookmark.php.
Notes
Author | Note |
---|---|
mdeslaur | owncloud packages in Ubuntu are now empty |
Priority
Status
Package | Release | Status |
---|---|---|
owncloud Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
precise |
Not vulnerable
|
|
quantal |
Ignored
(end of life)
|
|
raring |
Ignored
(end of life)
|
|
saucy |
Not vulnerable
(5.0.10+dfsg-1ubuntu1)
|
|
trusty |
Does not exist
(trusty was not-affected [6.0.1+dfsg-1ubuntu1])
|
|
upstream |
Released
(5.0.6)
|
|
utopic |
Does not exist
|
|
vivid |
Does not exist
|
|
wily |
Does not exist
|