CVE-2015-5953 – Debian Security Advisory 3373-1

https://notcve.org/view.php?id=CVE-2015-5953

19 Oct 2015 — Cross-site scripting (XSS) vulnerability in the activity application in ownCloud Server before 7.0.5 and 8.0.x before 8.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a " (double quote) character in a filename in a shared folder. Vulnerabilidad de XSS en la aplicación activity en ownCloud Server en versiones anteriores a 7.0.5 y 8.0.x en versiones anteriores a 8.0.4 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de un... • http://www.debian.org/security/2015/dsa-3373 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •