ownCloud Cross Site Scripting and Security Bypass Vulnerabilities

Bugtraq ID:	54999
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 14 2012 12:00AM
Updated:	Aug 14 2012 12:00AM
Credit:	Fuddl, Julien Cayssol
Vulnerable:
Not Vulnerable:

ownCloud Cross Site Scripting and Security Bypass Vulnerabilities

ownCloud is prone to a cross-site scripting vulnerability and a security bypass vulnerability.

Successfully exploiting these issues may allow an attacker to bypass certain security restrictions, execute arbitrary script code in the browser of an unsuspecting user, steal cookie-based authentication credentials, and perform certain administrative actions in the vulnerable application.

ownCloud 4.0.6 is vulnerable; other versions may also be affected.

ownCloud Cross Site Scripting and Security Bypass Vulnerabilities

Attackers can use a browser to exploit these issues.

ownCloud Cross Site Scripting and Security Bypass Vulnerabilities

Solution:
Vendor patch is available. Please see the references for more information.

ownCloud Cross Site Scripting and Security Bypass Vulnerabilities

References:

• Added XSRF check (Lukas Reschke)
  
• Don't return file handle if the mode supports writing and the file is not writab (Michael Gapczynski)
  
• ownCloud Homepage (ownCloud)
  
• owncloud Users can overwrite read-only shared files owned by other users via Web (Fuddl)
  
• Sanitzing user input (Lukas Reschke)
  
• XSRF checks (Lukas Reschke)