Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-4394

No fix known EPSS 2%

Cross-site scripting (XSS) vulnerability in apps/files/js/filelist.js in ownCloud before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter.

Published 2012-09-05 · CVE record · OSV

Products: owncloud, owncloud_server