CVE-2013-2044: Input Validation
Published Mar 14, 2014
·Updated
Open redirect vulnerability in the Login Page (index.php) in ownCloud before 5.0.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirecturl parameter.
Affected Software
11 affected components
ownCloud ownCloud<=5.0.5
ownCloud ownCloud=5.0.0
ownCloud ownCloud=5.0.1
ownCloud ownCloud=5.0.2
ownCloud ownCloud=5.0.3
ownCloud ownCloud=5.0.4
ownCloud ownCloud Server=5.0.0
ownCloud ownCloud Server=5.0.1
ownCloud ownCloud Server=5.0.2
ownCloud ownCloud Server=5.0.3
ownCloud ownCloud Server=5.0.4
Remediation
Event History
Mar 14, 2014
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-2044?
CVE-2013-2044 is rated as medium severity due to its potential to be exploited for phishing attacks.
2
How do I fix CVE-2013-2044?
To fix CVE-2013-2044, upgrade ownCloud to version 5.0.6 or later.
3
What systems are affected by CVE-2013-2044?
CVE-2013-2044 affects ownCloud versions prior to 5.0.6, specifically versions 5.0.0 through 5.0.5.
4
What type of vulnerability is CVE-2013-2044?
CVE-2013-2044 is an open redirect vulnerability that allows attackers to redirect users to arbitrary URLs.
5
Can CVE-2013-2044 be exploited remotely?
Yes, CVE-2013-2044 can be exploited remotely by an attacker through manipulation of the redirect_url parameter.