CVE-2012-2269: XSS
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary field to apps/contacts/ajax/addcard.php, (2) the parameter parameter to apps/contacts/ajax/addproperty.php, (3) the name parameter to apps/contacts/ajax/createaddressbook, (4) the file parameter to files/download.php, or the (5) name, (6) user, or (7) redirecturl parameter to files/index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2269?
CVE-2012-2269 has a medium severity rating due to the potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2012-2269?
To fix CVE-2012-2269, upgrade your ownCloud installation to version 3.0.3 or higher.
What types of vulnerabilities are associated with CVE-2012-2269?
CVE-2012-2269 is associated with multiple cross-site scripting (XSS) vulnerabilities.
What software versions are affected by CVE-2012-2269?
The affected versions of ownCloud include 3.0.0 to 3.0.2.
Can CVE-2012-2269 lead to unauthorized access?
Yes, CVE-2012-2269 can potentially allow remote attackers to execute arbitrary web scripts or HTML, leading to unauthorized access.