CVE-2013-2149: XSS
Published Mar 14, 2014
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.16 and 5.x before 5.0.7 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to shared files.
Affected Software
3 affected components
ownCloud ownCloud<4.0.16
ownCloud ownCloud>=5.0.0<5.0.7
ownCloud ownCloud Server>=5.0.0<5.0.7
Remediation
Event History
Mar 14, 2014
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-2149?
CVE-2013-2149 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2013-2149?
To fix CVE-2013-2149, upgrade to ownCloud version 4.0.16 or 5.0.7 or later.
3
Who is affected by CVE-2013-2149?
CVE-2013-2149 affects users of ownCloud versions prior to 4.0.16 and 5.x prior to 5.0.7.
4
What type of vulnerability is CVE-2013-2149?
CVE-2013-2149 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web scripts.
5
Can CVE-2013-2149 be exploited by unauthenticated users?
No, CVE-2013-2149 requires remote authenticated users to exploit the vulnerability.