CVE-2013-0307
Published: 14 March 2014
Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via the group input field parameter.
Notes
| Author | Note |
|---|---|
| mdeslaur | owncloud packages in Ubuntu are now empty |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
owncloud Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
| lucid |
Does not exist
|
|
| oneiric |
Ignored
(end of life)
|
|
| precise |
Not vulnerable
|
|
| quantal |
Ignored
(end of life)
|
|
| raring |
Not vulnerable
(5.0.4debian-0ubuntu1)
|
|
| saucy |
Not vulnerable
(5.0.4debian-0ubuntu1)
|
|
| trusty |
Does not exist
(trusty was not-affected [5.0.4debian-0ubuntu1])
|
|
| upstream |
Released
(4.0.12)
|
|
| utopic |
Does not exist
|
|
| vivid |
Does not exist
|
|
| wily |
Does not exist
|