Lucene search
OwnCloudOC-SA-2013-014HistoryApr 11, 2013 - 11:42 a.m.
Server: XSS Vulnerability in jPlayer
2013-04-1111:42:22
owncloud.org
35
EPSS
0.011
Percentile
84.5%
A cross-site scripting (XSS) vulnerability in all ownCloud versions prior to 5.0.5 including the 4.0.x branch allows remote attackers to execute arbitrary javascript when a user opens a special crafted URL.
This vulnerability exists in the bundled 3rdparty plugin “jPlayer”, “jPlayer” released version 2.2.20 which addresses the problem.
For more information please consult the official advisory.
This advisory is licensed CC BY-SA 4.0
Related
securityvulns
securityvulns
Vulnerabilities in jPlayer
2013-05-06 00:00:00
owncloud
owncloud
XSS Vulnerability in jPlayer - ownCloud
2013-04-11 17:49:52
packetstorm
packetstorm
jPlayer 2.2.22 XSS / Content Spoofing
2013-04-21 00:00:00
exploitdb
exploitdb
jPlayer - 'Jplayer.swf' Script Cross-Site Scripting
2013-03-29 00:00:00
openvas
openvas
ownCloud Multiple Vulnerabilities (oC-SA-2013-014, oC-SA-2013-015)
2014-07-03 00:00:00
osv
osv
jplayer Cross Site Scripting vulnerability
2022-05-17 04:39:22
veracode
veracode
Cross-Site Scripting (XSS)
2018-11-16 07:13:20
Cross-Site Scripting (XSS)
2018-11-16 07:17:37
Cross-Site Scripting (XSS)
2018-11-16 07:06:59
debiancve
debiancve
cve
cve
prion
prion
Cross site scripting
2013-08-15 17:55:00
Cross site scripting
2013-08-15 17:55:00
Cross site scripting
2013-08-17 16:55:00
cvelist
cvelist
nvd
nvd
ubuntucve
ubuntucve
github
github
jplayer Cross Site Scripting vulnerability
2022-05-17 04:39:22