CVE-2013-2040: XSS
Published Mar 14, 2014
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
61 affected components
ownCloud ownCloud<=4.0.14
ownCloud ownCloud=4.0.0
ownCloud ownCloud=4.0.1
ownCloud ownCloud=4.0.2
ownCloud ownCloud=4.0.3
ownCloud ownCloud=4.0.4
ownCloud ownCloud=4.0.5
ownCloud ownCloud=4.0.6
ownCloud ownCloud=4.0.7
ownCloud ownCloud=4.0.8
ownCloud ownCloud=4.0.9
ownCloud ownCloud=4.0.10
ownCloud ownCloud=4.0.11
ownCloud ownCloud=4.0.12
ownCloud ownCloud=4.0.13
ownCloud ownCloud=4.5.1
ownCloud ownCloud=4.5.2
ownCloud ownCloud=4.5.3
ownCloud ownCloud=4.5.4
ownCloud ownCloud=4.5.5
ownCloud ownCloud=4.5.6
ownCloud ownCloud=4.5.7
ownCloud ownCloud=4.5.8
ownCloud ownCloud=4.5.9
ownCloud ownCloud=4.5.10
ownCloud ownCloud=5.0.0
ownCloud ownCloud=5.0.1
ownCloud ownCloud=5.0.2
ownCloud ownCloud=5.0.3
ownCloud ownCloud=5.0.4
ownCloud ownCloud=5.0.5
ownCloud ownCloud Server=4.0.0
ownCloud ownCloud Server=4.0.1
ownCloud ownCloud Server=4.0.2
ownCloud ownCloud Server=4.0.3
ownCloud ownCloud Server=4.0.4
ownCloud ownCloud Server=4.0.5
ownCloud ownCloud Server=4.0.6
ownCloud ownCloud Server=4.0.7
ownCloud ownCloud Server=4.0.8
ownCloud ownCloud Server=4.0.9
ownCloud ownCloud Server=4.0.10
ownCloud ownCloud Server=4.0.11
ownCloud ownCloud Server=4.0.12
ownCloud ownCloud Server=4.0.13
ownCloud ownCloud Server=4.5.1
ownCloud ownCloud Server=4.5.2
ownCloud ownCloud Server=4.5.3
ownCloud ownCloud Server=4.5.4
ownCloud ownCloud Server=4.5.5
ownCloud ownCloud Server=4.5.6
ownCloud ownCloud Server=4.5.7
ownCloud ownCloud Server=4.5.8
ownCloud ownCloud Server=4.5.9
ownCloud ownCloud Server=4.5.10
ownCloud ownCloud Server=5.0.0
ownCloud ownCloud Server=5.0.1
ownCloud ownCloud Server=5.0.2
ownCloud ownCloud Server=5.0.3
ownCloud ownCloud Server=5.0.4
ownCloud ownCloud Server=5.0.5
Remediation
Event History
Mar 14, 2014
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-2040?
CVE-2013-2040 is considered a medium severity vulnerability due to the potential for cross-site scripting attacks by authenticated users.
2
How do I fix CVE-2013-2040?
To fix CVE-2013-2040, upgrade to ownCloud version 4.0.15 or later, 4.5.11 or later, or 5.0.6 or later.
3
What types of vulnerabilities are involved in CVE-2013-2040?
CVE-2013-2040 involves multiple cross-site scripting (XSS) vulnerabilities.
4
Can unauthenticated users exploit CVE-2013-2040?
No, CVE-2013-2040 can only be exploited by authenticated users.
5
What versions of ownCloud are affected by CVE-2013-2040?
CVE-2013-2040 affects ownCloud versions before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6.