CVEvulnerability
CVE-2015-3011
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-05-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted contact.
Affected configurations
• owncloud owncloud (<= 5.0.18)
• owncloud owncloud (<= 6.0.6)
• owncloud owncloud (<= 7.0.4)
• debian debian linux 7.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.debian.org/security/2015/dsa-3244 Vendor Advisory
- http://www.securityfocus.com/bid/74445 www.securityfocus.com
- https://owncloud.org/security/advisory/?id=oc-sa-2015-001 Vendor Advisory
- http://www.debian.org/security/2015/dsa-3244 Vendor Advisory
- http://www.securityfocus.com/bid/74445 www.securityfocus.com
- https://owncloud.org/security/advisory/?id=oc-sa-2015-001 Vendor Advisory