Unrated severityNVD Advisory· Published Apr 20, 2012· Updated Jun 16, 2026

CVE-2012-2270

Description

Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OwnCloud/Owncloud2 versions
cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*range: <=3.0.2
- (no CPE)range: <3.0.3
OwnCloud/Server2 versions
cpe:2.3:a:owncloud:owncloud_server:3.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:owncloud:owncloud_server:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:3.0.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.tele-consulting.com/advisories/TC-SA-2012-01.txtnvdExploit
secunia.com/advisories/48850nvdVendor Advisory
archives.neohapsis.com/archives/bugtraq/2012-04/0127.htmlnvd
osvdb.org/81211nvd
owncloud.org/security/advisories/CVE-2012-2270/nvd
packetstormsecurity.org/files/111956/ownCloud-3.0.0-Cross-Site-Scripting.htmlnvd
www.openwall.com/lists/oss-security/2012/08/11/1nvd
www.openwall.com/lists/oss-security/2012/09/02/2nvd
www.securityfocus.com/bid/53145nvd
exchange.xforce.ibmcloud.com/vulnerabilities/75029nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.030
kev	0.000
patch	-0.070
ransomware	0.000