Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote authenticated users to inject arbitrary web script or HTML by importing a link with an unspecified protocol. NOTE: this can be leveraged by remote attackers using CVE-2014-9041.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OwnCloud bookmarks 跨站脚本漏洞
Vulnerability Description
OwnCloud是德国OwnCloud公司的一套免费且开源的个人云存储解决方案，它提供文件管理、音乐存储、日历等功能。bookmarks是其中的一个书签应用程序。 OwnCloud的bookmarks应用程序中的import功能中存在跨站脚本漏洞。远程攻击者可通过导入带有未指明协议的连接利用该漏洞注入任意Web脚本或HTML。以下版本受到影响：OwnCloud 5.0.18之前版本，6.0.6之前6.x版本，7.0.3之前7.x版本。
CVSS Information
N/A
Vulnerability Type
N/A