Nixpkgs security tracker

Untriaged

Permalink CVE-2013-0202

created 2 months ago Activity log

Created suggestion 2 months ago

Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier …

Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/81476 x_transferredx_refsource_MISC
https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/ x_transferredx_refsource_MISC

Affected products

ownCloud

==4.0.10
==4.5.5
==and earlier

Matching in nixpkgs

pkgs.owncloud-client

Synchronise your ownCloud with your computer using this desktop client

nixos-unstable 6.0.3
- nixpkgs-unstable 6.0.3
- nixos-unstable-small 6.0.3
nixos-25.11 5.3.2
- nixos-25.11-small 5.3.2
- nixpkgs-25.11-darwin 5.3.2

Package maintainers

@qknight Joachim Schiele <js@lastlog.de>
@hellwolf Miao, ZhiCheng <zhicheng.miao@gmail.com>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.owncloud-client

Package maintainers