Dismissed
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse removed package owncloud-client
- @LeSuisse dismissed
Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier …
Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php.
References
- https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/ x_refsource_MISC
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81476 x_refsource_MISC
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81476 x_refsource_MISC x_transferred
- https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/ x_refsource_MISC x_transferred
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81476 x_refsource_MISC
- https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/ x_refsource_MISC
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81476 x_refsource_MISC x_transferred
- https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/ x_refsource_MISC x_transferred
Affected products
ownCloud
- ==4.0.10
- ==and earlier
- ==4.5.5