XSS in Owncloud Server

CVE-2014-3832

Cross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the print_unescaped function.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.010 (59.4th percentile) — read the EPSS interpretation.

Affected products

Owncloud Owncloud_server — versions 6.0.0, 6.0.1, 6.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)