ALT-PU-2015-2867

Низкий

ALT-PU-2015-2867: package owncloud update to version 7.0.4-alt1

Источник

errata.altlinux.org

Дата публикации

04.02.2015

Дата обновления

04.02.2015

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades owncloud to version 7.0.4-alt1.

Устраненные уязвимости8

CVE-2014-9041

Средний 6.8

Дата публикации: 04.02.2015

CWE-352

The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.

CVSS 2.0

Средний 6.8

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2014-9041 https://nvd.nist.gov/vuln/detail/CVE-2014-9041

Ссылки1

ALT-PU-2015-2867 https://errata.altlinux.org/ALT-PU-2015-2867

Связанные уязвимости

ALT-PU-2014-3208

CVSS3: 9.8

altlinux

больше 12 лет назад

ALT-PU-2014-3208: package `owncloud` update to version 6.0.1-alt1

CVE-2014-9041

nvd

почти 12 лет назад

CVE-2014-9041

debian

почти 12 лет назад

The import functionality in the bookmarks application in ownCloud serv ...

GHSA-2qf9-7qgg-cxxh

github

больше 4 лет назад

CVE-2014-9042

nvd

почти 12 лет назад

Cross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote authenticated users to inject arbitrary web script or HTML by importing a link with an unspecified protocol. NOTE: this can be leveraged by remote attackers using CVE-2014-9041.