PT-2013-6358 · Owncloud · Owncloud

Published 2013-07-21 · Updated 2013-07-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions OwnCloud versions prior to 5.0.9

Description The issue involves an XSS vulnerability in the "Share Interface" and an authentication bypass in the "user webdavauth" component. This update fixes these issues, as well as several other bugs.

Recommendations For versions prior to 5.0.9, update to OwnCloud 5.0.9 to resolve the issues.

Related Identifiers

MGASA-2013-0220

Affected Products

Owncloud

References · 6

• https://advisories.mageia.org/MGASA-2013-0220.html · Security Note
• https://osv.dev/vulnerability/MGASA-2013-0220 · Vendor Advisory
• http://owncloud.org/about/security/advisories/oC-SA-2013-030 · Note
• https://bugs.mageia.org/show_bug.cgi?id=10763 · Note
• http://owncloud.org/about/security/advisories/oC-SA-2013-029 · Note
• http://owncloud.org/changelog · Note