CVE-2012-4397: XSS
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) calendar displayname to part.choosecalendar.rowfields.php or (2) part.choosecalendar.rowfields.shared.php in apps/calendar/templates/; or (3) unspecified vectors to apps/contacts/lib/vcard.php.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4397?
CVE-2012-4397 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2012-4397?
To fix CVE-2012-4397, update ownCloud to version 4.0.1 or later.
What types of vulnerabilities are associated with CVE-2012-4397?
CVE-2012-4397 involves multiple cross-site scripting (XSS) vulnerabilities.
Which versions of ownCloud are affected by CVE-2012-4397?
CVE-2012-4397 affects ownCloud versions prior to 4.0.1, specifically versions 3.0.0 to 3.0.3.
Can CVE-2012-4397 be exploited remotely?
Yes, CVE-2012-4397 can be exploited by remote attackers to inject arbitrary web scripts or HTML.