PT-2012-5370 · Owncloud · Owncloud

Icewind1991 · Publicado 2012-09-05 · Atualizado 2012-09-06 · CVE-2012-4396

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.2

Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters in different ownCloud components. This includes file names, url, title, tag, page, identity, stack name, root, calendar displayname, calendar uri, title, location, description, and certain vectors in JavaScript files, as well as artist, album, or title comments.

Recommendations For ownCloud versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected components, such as apps/user ldap/settings.php, apps/bookmarks/ajax/editBookmark.php, and apps/gallery/lib/tiles.php, until a patch is available. Avoid using the vulnerable parameters, such as url, title, tag, page, identity, stack name, root, calendar displayname, calendar uri, title, location, description, artist, album, or title comments, in the affected API endpoints and scripts, like apps/bookmarks/ajax/updateList.php and apps/media/lib scanner.php, until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-4396

Produtos afetados

Owncloud

Referências · 13

• 🔥 https://github.com/owncloud/core/commit/f8337c9d723039760eecccf68bcb02752551e254 · Exploit
• 🔥 https://github.com/owncloud/core/commit/44260a552cd4ee50ee11eee45164c725f56f7027 · Exploit
• 🔥 https://github.com/owncloud/core/commit/e817504569dce49fd7a677fa510e500394af0c48 · Exploit
• 🔥 https://github.com/owncloud/core/commit/f955f6a6857754826af8903475688ba54f72c1bb · Exploit
• 🔥 https://github.com/owncloud/core/commit/cc653a8a408adfb4d0cd532145668aacd85ad96c · Exploit
• 🔥 https://github.com/owncloud/core/commit/8f616ecf76aac4a8b554fbf5a90b1645d0f25438 · Exploit
• 🔥 https://github.com/owncloud/core/commit/8f09299e2468dfc4f9ec72b05acf47de3ef9d1d7 · Exploit
• 🔥 https://github.com/owncloud/core/commit/d294373f476c795aaee7dc2444e7edfdea01a606 · Exploit
• https://github.com/owncloud/core/commit/642e7ce110cb8c320072532c29abe003385d50f5 · Correção
• http://openwall.com/lists/oss-security/2012/09/02/2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4396 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4396 · Nota
• http://openwall.com/lists/oss-security/2012/08/11/1 · Nota