CVE-2014-3833

ownCloud < 5.0.15 and 6.0.x < 6.0.3 - Cross-Site Scripting in Gallery and Core Components

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in ownCloud Server before 5.016 and 6.0.x before 6.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the print_unescaped function.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

http://owncloud.org/about/security/advisories/oc-sa-2014-010

Scores

EPSS 0.0032

EPSS Percentile 54.9%

Details

CWE

CWE-79

Status published

Products (19)

owncloud/owncloud < 5.0.15

owncloud/owncloud_server 5.0.0

owncloud/owncloud_server 5.0.1

owncloud/owncloud_server 5.0.2

owncloud/owncloud_server 5.0.3

owncloud/owncloud_server 5.0.4

owncloud/owncloud_server 5.0.5

owncloud/owncloud_server 5.0.6

owncloud/owncloud_server 5.0.7

owncloud/owncloud_server 5.0.8

... and 9 more

Published Jun 04, 2014

Tracked Since Feb 18, 2026