Skip to content
OpenAdvisories
Unscored CVE-2013-2042 EUVD-2013-2024GHSA-pr4g-h87m-hcmm

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote aut…

Published Mar 14, 2014 · Updated Aug 6, 2024 · Assigned by redhat

Description

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bookmarks/ajax/editBookmark.php.

References