Vulnerability Name: | CVE-2015-3011 (CCN-105319) | ||||||||||||||||
Assigned: | 2015-03-25 | ||||||||||||||||
Published: | 2015-03-25 | ||||||||||||||||
Updated: | 2016-12-03 | ||||||||||||||||
Summary: | Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted contact. | ||||||||||||||||
CVSS v3 Severity: | 2.6 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N)
| ||||||||||||||||
CVSS v2 Severity: | 3.5 Low (CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N) 3.0 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N/E:H/RL:OF/RC:C)
3.0 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N/E:H/RL:OF/RC:C)
| ||||||||||||||||
Vulnerability Type: | CWE-79 | ||||||||||||||||
Vulnerability Consequences: | Cross-Site Scripting | ||||||||||||||||
References: | Source: MITRE Type: CNA CVE-2015-3011 Source: DEBIAN Type: Vendor Advisory DSA-3244 Source: BID Type: UNKNOWN 74445 Source: XF Type: UNKNOWN owncloud-cve20153011-xss(105319) Source: CCN Type: ownCloud Security Advisory oc-sa-2015-001 Multiple stored XSS in "contacts" application (oC-SA-2015-001) Source: CONFIRM Type: Vendor Advisory https://owncloud.org/security/advisory/?id=oc-sa-2015-001 | ||||||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration 2: Denotes that component is vulnerable | ||||||||||||||||
Oval Definitions | |||||||||||||||||
| |||||||||||||||||
BACK |