CVE-2012-4395

No fix known EPSS 2%

Cross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirect_url parameter.

Published 2012-09-05 · CVE record · OSV

Products: owncloud, owncloud_server