CVE-2012-5608: Cross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x before 4.5....

Security readout for executives and security teams

ownCloud 4.5.x before 4.5.2 had an XSS flaw in the WebDAV auth settings page. A remote attacker could submit crafted POST parameters that inject script or HTML into a user’s browser. Business impact depends on who can reach that page and which user context executes the script. Exposure is most likely in legacy ownCloud 4.5.x installations, especially internet-accessible or broadly reachable deployments using the user_webdavauth app. Current ownCloud or renamed/forked products are not identified as affected by the provided sources. Prioritize this if legacy ownCloud is still in production or exposed to untrusted users. The vulnerability is old and not KEV-listed, but unsupported file-sharing platforms can carry high business risk when they hold sensitive data. Mitigation focus: Inventory ownCloud deployments and identify any 4.5.x systems.; Upgrade affected ownCloud 4.5.x installations to 4.5.2 or later.; Review the ownCloud advisory and changelog for vendor-specific upgrade guidance..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.