CVE-2013-0204: Code Injection
Published Jun 4, 2014
·Updated
settings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via crafted mount point settings.
Affected Software
12 affected components
ownCloud ownCloud=4.5.0
ownCloud ownCloud=4.5.1
ownCloud ownCloud=4.5.2
ownCloud ownCloud=4.5.3
ownCloud ownCloud=4.5.4
ownCloud ownCloud=4.5.5
ownCloud ownCloud Server=4.5.0
ownCloud ownCloud Server=4.5.1
ownCloud ownCloud Server=4.5.2
ownCloud ownCloud Server=4.5.3
ownCloud ownCloud Server=4.5.4
ownCloud ownCloud Server=4.5.5
Event History
Jun 4, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-0204?
CVE-2013-0204 has a high severity rating due to the potential for remote authenticated users to execute arbitrary PHP code.
2
How do I fix CVE-2013-0204?
To fix CVE-2013-0204, upgrade ownCloud to version 4.5.6 or later where the vulnerability is patched.
3
Which versions of ownCloud are affected by CVE-2013-0204?
CVE-2013-0204 affects ownCloud versions 4.5.0 to 4.5.5.
4
What kind of attack does CVE-2013-0204 facilitate?
CVE-2013-0204 allows remote authenticated users to execute arbitrary PHP code through crafted mount point settings.
5
Is user authentication required to exploit CVE-2013-0204?
Yes, exploitation of CVE-2013-0204 requires authentication as a remote user on the ownCloud platform.