CVE-2012-5606 in ownCloud

Summary

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) file name to apps/files_versions/js/versions.js or (2) apps/files/js/filelist.js; or (3) event title to 3rdparty/fullcalendar/js/fullcalendar.js.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

10/24/2012

Disclosure

12/17/2012

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-79

CVSS

4.3

EPSS

0.00521

CTI

0.00

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-5606
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-5606
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-5606/