ownCloud Bookmarks App CVE-2014-9042 HTML Injection Vulnerability

Bugtraq ID:	71389
Class:	Input Validation Error
CVE:	CVE-2014-9042
Remote:	Yes
Local:	No
Published:	Nov 25 2014 12:00AM
Updated:	May 07 2015 05:24PM
Credit:	Lukas Reschke
Vulnerable:	ownCloud ownCloud 7.0.2 ownCloud ownCloud 7.0.1 ownCloud ownCloud 7.0 ownCloud ownCloud 6.0.4 ownCloud ownCloud 6.0.1 ownCloud ownCloud 5.0.11 ownCloud ownCloud 5.0.10 ownCloud ownCloud 5.0.8 ownCloud ownCloud 5.0.7 ownCloud ownCloud 5.0.6 ownCloud ownCloud 5.0.5 ownCloud ownCloud 5.0.4 ownCloud ownCloud 5.0.3 ownCloud ownCloud 5.0.1 ownCloud ownCloud 5.0 ownCloud ownCloud 6.0.5 ownCloud ownCloud 6.0.3 ownCloud ownCloud 6.0.2 ownCloud ownCloud 6.0.0a ownCloud ownCloud 6.0.0 ownCloud ownCloud 5.0.9 ownCloud ownCloud 5.0.2 ownCloud ownCloud 5.0.17 ownCloud ownCloud 5.0.16 ownCloud ownCloud 5.0.15 ownCloud ownCloud 5.0.14 A ownCloud ownCloud 5.0.14 ownCloud ownCloud 5.0.13 ownCloud ownCloud 5.0.12 Mandriva Business Server 1 X86 64 Mandriva Business Server 1
Not Vulnerable:	ownCloud ownCloud 7.0.3 ownCloud ownCloud 6.0.6 ownCloud ownCloud 5.0.18

ownCloud Bookmarks App CVE-2014-9042 HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

ownCloud Bookmarks App CVE-2014-9042 HTML Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Mandriva Business Server 1 X86 64

• Mandriva owncloud-5.0.19-1.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/