- CVE-2013-1967 (MediaElement.js)
- ownCloud Server < 5.0.5
- ownCloud Server < 4.5.10
This vulnerability exists in the bundled 3rdparty plugin “MediaElement.js”, “MediaElement.js” released version 2.11.2 which addresses the problem.Credits
The ownCloud Team would like to thank Malte Batram for discovering this vulnerability and responsibly disclosing this to us and upstream.