CVE-2013-2149

Related Files

Mandriva Linux Security Advisory 2013-175

Posted Jun 18, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-175 - Cross-site scripting vulnerabilities in js/viewer.js inside the files_videoviewer application via multiple unspecified vectors in all ownCloud versions prior to 5.0.7 and 4.5.12 allows authenticated remote attackers to inject arbitrary web script or HTML via shared files. Cross-site scripting vulnerabilities in core/js/oc-dialogs.js via multiple unspecified vectors in all ownCloud versions prior to 5.0.7 and other versions before 4.0.16 allows authenticated remote attackers to inject arbitrary web script or HTML via shared files. This advisory provides the latest versions of owncloud which is not vulnerable to these issues.

tags | advisory, remote, web, arbitrary, vulnerability, xss

systems | linux, mandriva

advisories | CVE-2013-2150, CVE-2013-2149

SHA-256 | 16f100b70ba225304cca8fb72249be12ecd48ace8433b1c00a0c74d79b895e96

Download | Favorite | View