CVE-2013-2149

owncloud < 4.0.16 and 5.0.0-5.0.7 - Authenticated Cross-Site Scripting via Shared Files

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.16 and 5.x before 5.0.7 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to shared files.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://owncloud.org/about/security/advisories/oC-SA-2013-028/

Scores

EPSS 0.0019
EPSS Percentile 39.8%

Details

CWE
CWE-79
Status published
Products (2)
owncloud/owncloud < 4.0.16
owncloud/owncloud_server 5.0.0 - 5.0.7
Published Mar 14, 2014
Tracked Since Feb 18, 2026