CVE-2014-1665

Опубликовано: 20 мар. 2018

Источник: debian

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
owncloud	removed			package

EPSS

Процентиль: 88%

0.03027

Низкий

Связанные уязвимости

CVE-2014-1665

CVSS3: 5.4

ubuntu

больше 8 лет назад

Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file.

CVE-2014-1665

CVSS3: 5.4

nvd

больше 8 лет назад

Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file.

GHSA-994c-3jcg-fx29

CVSS3: 5.4

github

больше 4 лет назад

Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file.

ALT-PU-2014-3208

CVSS3: 9.8

altlinux

больше 12 лет назад

ALT-PU-2014-3208: package `owncloud` update to version 6.0.1-alt1

EPSS

Процентиль: 88%

0.03027

Низкий