CVE-2013-2150

owncloud_server < 4.5.12 and 5.x < 5.0.7 - Cross-Site Scripting via Shared Files

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and 5.x before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to shared files.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://owncloud.org/about/security/advisories/oC-SA-2013-028/

Scores

EPSS 0.0019
EPSS Percentile 39.8%

Details

CWE
CWE-79
Status published
Products (40)
owncloud/owncloud < 4.5.11
owncloud/owncloud_server 5.0.0
owncloud/owncloud_server 5.0.1
owncloud/owncloud_server 5.0.2
owncloud/owncloud_server 5.0.3
owncloud/owncloud_server 5.0.4
owncloud/owncloud_server 5.0.5
owncloud/owncloud_server 5.0.6
owncloud/owncloud_server 3.0.0
owncloud/owncloud_server 3.0.1
... and 30 more
Published Mar 14, 2014
Tracked Since Feb 18, 2026