Alpine/ruby: medium 6.1

ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.'

Action: Upgrade ruby to 2.5.8-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2020-16255#Alpine:v3.9/ruby
• https://security.alpinelinux.org/vuln/CVE-2020-16255

published 2021-01-15T18:15:13.073Z · modified 2026-10-26T11:17:55.136854195Z · JSON