PT-2012-5370 · Owncloud · Owncloud

Icewind1991 · Published 2012-09-05 · Updated 2012-09-06 · CVE-2012-4396

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.2

Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters in different ownCloud components. This includes file names, url, title, tag, page, identity, stack name, root, calendar displayname, calendar uri, title, location, description, and certain vectors in JavaScript files, as well as artist, album, or title comments.

Recommendations For ownCloud versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected components, such as apps/user ldap/settings.php, apps/bookmarks/ajax/editBookmark.php, and apps/gallery/lib/tiles.php, until a patch is available. Avoid using the vulnerable parameters, such as url, title, tag, page, identity, stack name, root, calendar displayname, calendar uri, title, location, description, artist, album, or title comments, in the affected API endpoints and scripts, like apps/bookmarks/ajax/updateList.php and apps/media/lib scanner.php, until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-4396

Affected Products

Owncloud

References · 13

• 🔥 https://github.com/owncloud/core/commit/f8337c9d723039760eecccf68bcb02752551e254 · Exploit
• 🔥 https://github.com/owncloud/core/commit/44260a552cd4ee50ee11eee45164c725f56f7027 · Exploit
• 🔥 https://github.com/owncloud/core/commit/e817504569dce49fd7a677fa510e500394af0c48 · Exploit
• 🔥 https://github.com/owncloud/core/commit/f955f6a6857754826af8903475688ba54f72c1bb · Exploit
• 🔥 https://github.com/owncloud/core/commit/cc653a8a408adfb4d0cd532145668aacd85ad96c · Exploit
• 🔥 https://github.com/owncloud/core/commit/8f616ecf76aac4a8b554fbf5a90b1645d0f25438 · Exploit
• 🔥 https://github.com/owncloud/core/commit/8f09299e2468dfc4f9ec72b05acf47de3ef9d1d7 · Exploit
• 🔥 https://github.com/owncloud/core/commit/d294373f476c795aaee7dc2444e7edfdea01a606 · Exploit
• https://github.com/owncloud/core/commit/642e7ce110cb8c320072532c29abe003385d50f5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2012-4396 · Security Note
• http://openwall.com/lists/oss-security/2012/09/02/2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4396 · Note
• http://openwall.com/lists/oss-security/2012/08/11/1 · Note