Description

Cross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirect_url parameter.

Remediation

References

CVE-2012-4395

Related Vulnerabilities

Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43782)

WebLogic CVE-2023-22108 Vulnerability (CVE-2023-22108)

WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Request Forgery (1.9.2)

WordPress 2.0.5 Invalid CSRF Token Cross-Site Scripting Vulnerability (0.6.2 - 2.0.5)

Apache Traffic Server Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2026-58175)

Severity

Medium

Classification

CVE-2012-4395 CWE-707

Tags

Missing Update Known Vulnerabilities