3.5

CVE-2014-9042

Cross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote authenticated users to inject arbitrary web script or HTML by importing a link with an unspecified protocol.  NOTE: this can be leveraged by remote attackers using CVE-2014-9041.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Owncloud ≫ Owncloud Version <= 5.0.17
Owncloud ≫ Owncloud Server Version5.0.0
Owncloud ≫ Owncloud Server Version5.0.1
Owncloud ≫ Owncloud Server Version5.0.2
Owncloud ≫ Owncloud Server Version5.0.3
Owncloud ≫ Owncloud Server Version5.0.4
Owncloud ≫ Owncloud Server Version5.0.5
Owncloud ≫ Owncloud Server Version5.0.6
Owncloud ≫ Owncloud Server Version5.0.7
Owncloud ≫ Owncloud Server Version5.0.8
Owncloud ≫ Owncloud Server Version5.0.9
Owncloud ≫ Owncloud Server Version5.0.10
Owncloud ≫ Owncloud Server Version5.0.11
Owncloud ≫ Owncloud Server Version5.0.12
Owncloud ≫ Owncloud Server Version5.0.13
Owncloud ≫ Owncloud Server Version5.0.14
Owncloud ≫ Owncloud Server Version5.0.14 Updatea
Owncloud ≫ Owncloud Server Version5.0.15
Owncloud ≫ Owncloud Server Version5.0.16
Owncloud ≫ Owncloud Server Version6.0.0
Owncloud ≫ Owncloud Server Version6.0.1
Owncloud ≫ Owncloud Server Version6.0.2
Owncloud ≫ Owncloud Server Version6.0.3
Owncloud ≫ Owncloud Server Version6.0.4
Owncloud ≫ Owncloud Server Version6.0.5
Owncloud ≫ Owncloud Server Version7.0.0
Owncloud ≫ Owncloud Server Version7.0.1
Owncloud ≫ Owncloud Server Version7.0.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.373
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.