CVE-2014-3832: XSS
Published Jun 4, 2014
·Updated
Cross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the printunescaped function.
Affected Software
6 affected components
ownCloud ownCloud=6.0.0
ownCloud ownCloud=6.0.1
ownCloud ownCloud=6.0.2
ownCloud ownCloud Server=6.0.0
ownCloud ownCloud Server=6.0.1
ownCloud ownCloud Server=6.0.2
Event History
Jun 4, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3832?
CVE-2014-3832 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-3832?
To fix CVE-2014-3832, upgrade ownCloud Server to version 6.0.3 or later.
3
What types of attacks are possible due to CVE-2014-3832?
CVE-2014-3832 allows remote attackers to perform cross-site scripting attacks by injecting arbitrary web scripts or HTML.
4
Which versions of ownCloud are affected by CVE-2014-3832?
CVE-2014-3832 affects ownCloud Server versions 6.0.0 through 6.0.2.
5
Is user data compromised by CVE-2014-3832?
While CVE-2014-3832 primarily allows script injection, it can lead to further exploitation that may compromise user data.