Published: 08/05/2015 Updated: 11/02/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in WebODF prior to 0.5.5, as used in ownCloud, allow remote malicious users to inject arbitrary web script or HTML via a (1) style or (2) font name or (3) javascript or (4) data URI.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 7.0
kogmbh webodf

Multiple vulnerabilities were discovered in ownCloud, a cloud storage web service for files, music, contacts, calendars and many more CVE-2015-3011 Hugh Davenport discovered that the contacts application shipped with ownCloud is vulnerable to multiple stored cross-site scripting attacks This vulnerability is effectively exploitable ...

CWE-79 https://github.com/kogmbh/WebODF/blob/master/ChangeLog.md https://github.com/kogmbh/WebODF/pull/850/files http://www.debian.org/security/2015/dsa-3244 https://github.com/kogmbh/WebODF/pull/849 https://owncloud.org/security/advisory/?id=oc-sa-2015-002 http://www.securityfocus.com/bid/74445 https://www.debian.org/security/./dsa-3244 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-3012

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect