CVE-2013-0301: CSRF

Q: What is the severity of CVE-2013-0301?

CVE-2013-0301 is classified as a moderate severity vulnerability due to its potential for cross-site request forgery attacks.

Q: How do I fix CVE-2013-0301?

To fix CVE-2013-0301, upgrade to ownCloud version 4.0.12 or later, which includes patches for this vulnerability.

Q: What software is affected by CVE-2013-0301?

CVE-2013-0301 affects ownCloud versions prior to 4.0.12 and specifically includes versions 3.0.0 to 4.0.11.

Q: What type of vulnerability is CVE-2013-0301?

CVE-2013-0301 is a cross-site request forgery (CSRF) vulnerability that allows attackers to hijack user sessions.

Q: What is the potential impact of CVE-2013-0301?

The potential impact of CVE-2013-0301 includes unauthorized timezone changes by malicious users, compromising user sessions.

Published Mar 14, 2014

Updated

Cross-site request forgery (CSRF) vulnerability in apps/calendar/ajax/settings/settimezone in ownCloud before 4.0.12 allows remote attackers to hijack the authentication of users for requests that change the timezone via the timezone parameter.

Affected Software

31 affected components

ownCloud ownCloud<=4.0.11

ownCloud ownCloud=3.0.0

ownCloud ownCloud=3.0.1

ownCloud ownCloud=3.0.2

ownCloud ownCloud=3.0.3

ownCloud ownCloud=4.0.0

ownCloud ownCloud=4.0.1

ownCloud ownCloud=4.0.2

ownCloud ownCloud=4.0.3

ownCloud ownCloud=4.0.4

ownCloud ownCloud=4.0.5

ownCloud ownCloud=4.0.6

ownCloud ownCloud=4.0.7

ownCloud ownCloud=4.0.8

ownCloud ownCloud=4.0.9

ownCloud ownCloud=4.0.10

ownCloud ownCloud Server=3.0.0

ownCloud ownCloud Server=3.0.1

ownCloud ownCloud Server=3.0.2

ownCloud ownCloud Server=3.0.3

ownCloud ownCloud Server=4.0.0

ownCloud ownCloud Server=4.0.1

ownCloud ownCloud Server=4.0.2

ownCloud ownCloud Server=4.0.3

ownCloud ownCloud Server=4.0.4

ownCloud ownCloud Server=4.0.5

ownCloud ownCloud Server=4.0.6

ownCloud ownCloud Server=4.0.7

ownCloud ownCloud Server=4.0.8

ownCloud ownCloud Server=4.0.9

ownCloud ownCloud Server=4.0.10

Event History

Mar 14, 2014

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:55 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-0301?

CVE-2013-0301 is classified as a moderate severity vulnerability due to its potential for cross-site request forgery attacks.

How do I fix CVE-2013-0301?

To fix CVE-2013-0301, upgrade to ownCloud version 4.0.12 or later, which includes patches for this vulnerability.

What software is affected by CVE-2013-0301?