Nixpkgs security tracker

Dismissed

Permalink CVE-2013-0202

updated 5 months, 1 week ago by @LeSuisse Activity log

Created suggestion 5 months, 1 week ago
@LeSuisse ignored package owncloud-client 5 months, 1 week ago
@LeSuisse dismissed 5 months, 1 week ago

Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier …

Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/81476 x_refsource_MISCx_transferred
https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/ x_refsource_MISCx_transferred

Affected products

ownCloud

==4.5.5
==4.0.10
==and earlier

Ignored packages (1)

pkgs.owncloud-client

Synchronise your ownCloud with your computer using this desktop client

nixos-unstable 6.0.3
- nixpkgs-unstable 6.0.3
- nixos-unstable-small 6.0.3

Not present in nixpkgs

Suggestion detail

References

Affected products

pkgs.owncloud-client