CVE-2013-0307

ownCloud < 4.0.12 and 4.5.x < 4.5.7 - Authenticated Cross-Site Scripting via Group Input Field

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via the group input field parameter.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

http://owncloud.org/about/security/advisories/oC-SA-2013-003/

Scores

EPSS 0.0069

EPSS Percentile 48.4%

Details

CWE

CWE-79

Status published

Products (23)

owncloud/owncloud < 4.0.11

owncloud/owncloud_server 3.0.0

owncloud/owncloud_server 3.0.1

owncloud/owncloud_server 3.0.2

owncloud/owncloud_server 3.0.3

owncloud/owncloud_server 4.0.0

owncloud/owncloud_server 4.0.1

owncloud/owncloud_server 4.0.2

owncloud/owncloud_server 4.0.3

owncloud/owncloud_server 4.0.4

... and 13 more

Published Mar 14, 2014

Tracked Since Feb 18, 2026