ALT-PU-2014-3208

Критический

ALT-PU-2014-3208: package owncloud update to version 6.0.1-alt1

Источник

errata.altlinux.org

Дата публикации

20.02.2014

Дата обновления

20.02.2014

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades owncloud to version 6.0.1-alt1.

Устраненные уязвимости17

CVE-2014-1665

Средний 5.4

Дата публикации: 20.03.2018

CWE-79

Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file.

CVSS 3.0

Средний 5.4

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: Required
Scope: Changed
Confidentiality: Low
Integrity: Low
Availability: None

CVSS 2.0

Низкий 3.5

AV:N/AC:M/Au:S/C:N/I:P/A:N

Access vector: Network
Complexity: Medium
Authentication: Single
Confidentiality: None
Integrity: Partial
Availability: None

Ссылки

CVE-2014-1665 https://nvd.nist.gov/vuln/detail/CVE-2014-1665

Ссылки1

ALT-PU-2014-3208 https://errata.altlinux.org/ALT-PU-2014-3208

Связанные уязвимости

CVE-2014-1665

CVSS3: 5.4

ubuntu

больше 8 лет назад

Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file.

CVE-2014-1665

CVSS3: 5.4

nvd

больше 8 лет назад

Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file.

CVE-2014-1665

CVSS3: 5.4

debian

больше 8 лет назад

Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allo ...

GHSA-994c-3jcg-fx29

CVSS3: 5.4

github

больше 4 лет назад

Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file.

ALT-PU-2014-3209

CVSS3: 9.8

altlinux

больше 12 лет назад

ALT-PU-2014-3209: package `owncloud` update to version 6.0.3-alt1