CVE-2014-3833: XSS
First published: Wed Jun 04 2014(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in ownCloud Server before 5.016 and 6.0.x before 6.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the print_unescaped function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ownCloud | <=5.0.15 | |
| ownCloud | =5.0.0 | |
| ownCloud | =5.0.1 | |
| ownCloud | =5.0.2 | |
| ownCloud | =5.0.3 | |
| ownCloud | =5.0.4 | |
| ownCloud | =5.0.5 | |
| ownCloud | =5.0.6 | |
| ownCloud | =5.0.7 | |
| ownCloud | =5.0.8 | |
| ownCloud | =5.0.9 | |
| ownCloud | =5.0.10 | |
| ownCloud | =5.0.11 | |
| ownCloud | =5.0.12 | |
| ownCloud | =5.0.13 | |
| ownCloud | =5.0.14 | |
| ownCloud | =5.0.14-a | |
| ownCloud | =6.0.0 | |
| ownCloud | =6.0.1 | |
| ownCloud | =6.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-3833?
CVE-2014-3833 has multiple cross-site scripting vulnerabilities that could allow remote attackers to inject arbitrary web scripts or HTML.
How do I fix CVE-2014-3833?
To fix CVE-2014-3833, upgrade to ownCloud Server version 5.0.16 or 6.0.3 or later.
Which versions of ownCloud are affected by CVE-2014-3833?
CVE-2014-3833 affects ownCloud Server versions before 5.0.16 and 6.0.x before 6.0.3.
What components are affected by CVE-2014-3833?
CVE-2014-3833 affects the Gallery and core components of ownCloud Server.
What is the potential impact of CVE-2014-3833?
The potential impact of CVE-2014-3833 includes unauthorized script execution on users' browsers, leading to possible data theft or session hijacking.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/references
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/owncloud
- canonical/owncloud
- version/owncloud/5.0.15
- version/owncloud/5.0.0
- version/owncloud/5.0.1
- version/owncloud/5.0.2
- version/owncloud/5.0.3
- version/owncloud/5.0.4
- version/owncloud/5.0.5
- version/owncloud/5.0.6
- version/owncloud/5.0.7
- version/owncloud/5.0.8
- version/owncloud/5.0.9
- version/owncloud/5.0.10
- version/owncloud/5.0.11
- version/owncloud/5.0.12
- version/owncloud/5.0.13
- version/owncloud/5.0.14
- version/owncloud/5.0.14-a
- version/owncloud/6.0.0
- version/owncloud/6.0.1
- version/owncloud/6.0.2