WebODF CVE-2014-9716 HTML Injection Vulnerability
BID:74577
Info
WebODF CVE-2014-9716 HTML Injection Vulnerability
| Bugtraq ID: | 74577 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-9716 |
| Remote: | Yes |
| Local: | No |
| Published: | May 08 2015 12:00AM |
| Updated: | May 08 2015 12:00AM |
| Credit: | Roy Jansen and Lukas Reschke. |
| Vulnerable: |
KO GmbH WebODF 0.5.3 KO GmbH WebODF 0.5 |
| Not Vulnerable: |
KO GmbH WebODF 0.5.4 |
Solution / Fix
WebODF CVE-2014-9716 HTML Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
WebODF CVE-2014-9716 HTML Injection Vulnerability
References:
References:
- Multiple stored XSS in "documents" application (oC-SA-2015-002) (ownCloud)
- Sanitize file name #851 (WebODF)
- WebODF Homepage (WebODF)
- WebODF/ChangeLog (WebODF)