Mandriva Linux Security Advisory : owncloud (MDVSA-2015:191)
high Nessus Plugin ID 82562
Language:
Synopsis
The remote Mandriva Linux host is missing a security update.Description
Multiple vulnerabilities has been discovered and corrected in owncloud :- Multiple stored XSS in contacts application (oC-SA-2015-001)
- Multiple stored XSS in documents application (oC-SA-2015-002)
- Bypass of file blacklist (oC-SA-2015-004)
The updated packages have been upgraded to the 7.0.5 version where these security flaws has been fixed.
Solution
Update the affected owncloud package.See Also
https://owncloud.org/changelog/
https://owncloud.org/security/advisory/?id=oc-sa-2015-001
Plugin Details
Severity: High
ID: 82562
File Name: mandriva_MDVSA-2015-191.nasl
Version: 1.4
Type: local
Family: Mandriva Local Security Checks
Published: 4/3/2015
Updated: 1/14/2021
Vulnerability Information
CPE: p-cpe:/a:mandriva:linux:owncloud, cpe:/o:mandriva:business_server:2
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list
Patch Publication Date: 4/1/2015
Reference Information
MDVSA: 2015:191