{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-11-25T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote authenticated users to inject arbitrary web script or HTML by importing a link with an unspecified protocol. NOTE: this can be leveraged by remote attackers using CVE-2014-9041."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2015-02-04T17:57:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://owncloud.org/security/advisory/?id=oc-sa-2014-028"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-9042", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote authenticated users to inject arbitrary web script or HTML by importing a link with an unspecified protocol. NOTE: this can be leveraged by remote attackers using CVE-2014-9041."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://owncloud.org/security/advisory/?id=oc-sa-2014-028", "refsource": "CONFIRM", "url": "https://owncloud.org/security/advisory/?id=oc-sa-2014-028"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T13:33:13.365Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://owncloud.org/security/advisory/?id=oc-sa-2014-028"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2014-9042", "datePublished": "2015-02-04T18:00:00", "dateReserved": "2014-11-21T00:00:00", "dateUpdated": "2024-08-06T13:33:13.365Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "matchCriteriaId": "1258D6F1-DB48-4C47-AE81-F3E4FC79F6C4", "versionEndIncluding": "5.0.17", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "D89BE316-CE49-49CB-85FB-B93C86E07276", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "BD902884-4F28-4AF6-A8D7-A6CD15048B0C", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "B18395A6-B385-4ADB-9278-5F59FF339F1F", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "94834DA8-247E-4A53-A95A-708AF7F9AC4E", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "35203A98-76CE-4475-9C4A-60E6A1990B8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "0B1C940B-E6FE-41D5-8313-E6498331E9F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "F530C316-3FAC-4F1A-8AFA-7E9300EFDFFD", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "14EDBCD8-08D3-4730-BA07-2F1B3E0B5FD9", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "1368B598-A061-4AB1-8B45-4E2F87AA0CF5", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "8E3A73DB-414D-4E84-9929-CF57F31E407C", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "23EE5509-FF8F-42A5-9002-A9BC5A4178C5", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "8FC6B240-1040-465B-B6B1-133651A6374B", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "DB2BEBED-B273-4779-8168-7168F1B32CDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "C91EB5FD-9B1C-41A3-B76F-5FC2A3FA3C10", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "A24E2C3B-6585-482B-920B-B41B892B8D99", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.14:a:*:*:*:*:*:*", "matchCriteriaId": "23074545-AFE4-490D-8E10-983B466113DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "A179770B-2017-4033-81F9-8BCDEBFAD214", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.16:*:*:*:*:*:*:*", "matchCriteriaId": "7EA890BC-E58E-4944-B68A-3F7ECED96014", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:6.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "5927D266-65D2-4E6E-A5E7-2F572E411B8E", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:6.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "EA0FCB53-D1BB-45FB-BC2D-FF5EDD2A980C", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:6.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "97FA00E0-CFC9-431D-BB62-A65FF55B53B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:6.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "95F40586-F7D6-426C-988F-053041074CEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:6.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "F763E39A-1AC7-4EED-97F9-639F555BA781", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:6.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "6BE9C9DC-3DC8-4DA8-8F3F-E2974A3A6626", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:7.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "8850D462-7494-40AF-BA58-91AB3EC4688E", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:7.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "C21CA18D-81F1-4B65-B46A-688D060F4E37", "vulnerable": true}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:7.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "AFF45C5A-FA91-4908-9396-984FA6DBF80B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote authenticated users to inject arbitrary web script or HTML by importing a link with an unspecified protocol. NOTE: this can be leveraged by remote attackers using CVE-2014-9041."}, {"lang": "es", "value": "Vulnerabilidad de XSS en la funcionalidad de importaci\u00f3n en la aplicaci\u00f3n bookmarks en ownCloud anterior a 5.0.18, 6.x anterior a 6.0.6, y 7.x anterior a 7.0.3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios mediante la importaci\u00f3n un enlac\u00e9 con un protocolo no especificado. NOTA: esto puede ser aprovechado por atacantes remotos que utilizan CVE-2014-9041."}], "id": "CVE-2014-9042", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2015-02-04T18:59:02.620", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://owncloud.org/security/advisory/?id=oc-sa-2014-028"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://owncloud.org/security/advisory/?id=oc-sa-2014-028"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}