CVE-2012-2270: Input Validation
Published Apr 20, 2012
·Updated
Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirecturl parameter.
Affected Software
5 affected components
ownCloud ownCloud<=3.0.2
ownCloud ownCloud=3.0.0
ownCloud ownCloud=3.0.1
ownCloud ownCloud Server=3.0.0
ownCloud ownCloud Server=3.0.1
Event History
Apr 20, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2012-2270?
CVE-2012-2270 is considered a medium severity vulnerability due to its potential for abuse in phishing attacks.
2
How do I fix CVE-2012-2270?
To fix CVE-2012-2270, you should upgrade ownCloud to version 3.0.3 or later.
3
What type of vulnerability is CVE-2012-2270?
CVE-2012-2270 is classified as an open redirect vulnerability.
4
Which versions of ownCloud are affected by CVE-2012-2270?
CVE-2012-2270 affects ownCloud versions prior to 3.0.3, specifically 3.0.0, 3.0.1, and 3.0.2.
5
What can attackers accomplish using CVE-2012-2270?
Attackers can exploit CVE-2012-2270 to redirect users to arbitrary websites, potentially conducting phishing attacks.