Description

Cross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirect_url parameter.

Remediation

References

CVE-2012-4395

Related Vulnerabilities

easyXDM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27739)

Nexus Repository Manager Improper Authentication Vulnerability (CVE-2019-9629)

WordPress Plugin Select All Categories and Taxonomies, Change Checkbox to Radio Buttons Cross-Site Scripting (1.3.1)

WordPress 4.0.x Cross-Domain Flash Injection Vulnerability (4.0 - 4.0.21)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1029)

Severity

Medium

Classification

CVE-2012-4395 CWE-707

Tags

Missing Update Known Vulnerabilities