CVE-2013-0201: XSS
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) QUERYSTRING to core/lostpassword/templates/resetpassword.php, (2) mime parameter to apps/files/ajax/mimeicon.php, or (3) token parameter to apps/gallery/sharing.php.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0201?
CVE-2013-0201 has a medium severity rating due to potential cross-site scripting attacks.
How do I fix CVE-2013-0201?
To fix CVE-2013-0201, update to version 4.5.6 or later of ownCloud, which includes patches for these XSS vulnerabilities.
What versions of ownCloud are affected by CVE-2013-0201?
CVE-2013-0201 affects ownCloud versions up to and including 4.5.5 and all 4.0.x versions.
What type of vulnerability is CVE-2013-0201?
CVE-2013-0201 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
Can CVE-2013-0201 lead to data breaches?
Yes, CVE-2013-0201 can lead to data breaches by enabling attackers to steal user information through malicious scripts.