CVE-2012-2270: owncloud Improper Input Validation
Vulnerability summary
CVE-2012-2270 is a medium (CVSS 5.8) Improper Input Validation vulnerability in owncloud. EPSS estimates a 6.01% chance of exploitation in the next 30 days, higher than 93.2% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 20-04-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
6.01%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 6.01% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (tele-consulting.com)
Maturity: unknown
ownCloud 3.0.0 - 'index.php?redirect_url' Arbitrary Site Redirect
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Owncloud2 products
- owncloud≤ 3.0.2
- owncloud_server3.0.0 | 3.0.1
1 vendor · 2 products
References
10 links- owncloud.org/security/advisories/CVE-2012-2270/X Refsource CONFIRM