Description
ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.'
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.9 | ruby | 2.5.8-r0 | — |
| Alpine v3.8 | ruby | 2.5.8-r0 | — |
Advisories 1
- WID-SEC-2023-2476 Ruby: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 8, 2025