CVE-2013-2150: XSS

Q: What is the severity of CVE-2013-2150?

The severity of CVE-2013-2150 is classified as medium, primarily due to the potential for cross-site scripting (XSS) attacks.

Q: How do I fix CVE-2013-2150?

To mitigate CVE-2013-2150, upgrade to ownCloud version 4.5.12 or later, or 5.0.7 or later.

Q: Which versions of ownCloud are affected by CVE-2013-2150?

CVE-2013-2150 affects all ownCloud versions prior to 4.5.12 and 5.x versions before 5.0.7.

Q: What types of attacks can be executed through CVE-2013-2150?

CVE-2013-2150 allows remote attackers to perform cross-site scripting attacks by injecting arbitrary web script or HTML.

Q: What is the impact of CVE-2013-2150 on users?

The impact of CVE-2013-2150 includes the potential for attackers to impersonate users and steal sensitive information through malicious scripts.

Published Mar 14, 2014

Updated

Multiple cross-site scripting (XSS) vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and 5.x before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to shared files.

Affected Software

79 affected components

ownCloud ownCloud=5.0.0

ownCloud ownCloud=5.0.1

ownCloud ownCloud=5.0.2

ownCloud ownCloud=5.0.3

ownCloud ownCloud=5.0.4

ownCloud ownCloud=5.0.5

ownCloud ownCloud=5.0.6

ownCloud ownCloud<=4.5.11

ownCloud ownCloud=3.0.0

ownCloud ownCloud=3.0.1

ownCloud ownCloud=3.0.2

ownCloud ownCloud=3.0.3

ownCloud ownCloud=4.0.0

ownCloud ownCloud=4.0.1

ownCloud ownCloud=4.0.2

ownCloud ownCloud=4.0.3

ownCloud ownCloud=4.0.4

ownCloud ownCloud=4.0.5

ownCloud ownCloud=4.0.6

ownCloud ownCloud=4.0.7

ownCloud ownCloud=4.0.8

ownCloud ownCloud=4.0.9

ownCloud ownCloud=4.0.10

ownCloud ownCloud=4.0.11

ownCloud ownCloud=4.0.12

ownCloud ownCloud=4.0.13

ownCloud ownCloud=4.0.14

ownCloud ownCloud=4.0.15

ownCloud ownCloud=4.0.16

ownCloud ownCloud=4.5.0

ownCloud ownCloud=4.5.1

ownCloud ownCloud=4.5.2

ownCloud ownCloud=4.5.3

ownCloud ownCloud=4.5.4

ownCloud ownCloud=4.5.5

ownCloud ownCloud=4.5.6

ownCloud ownCloud=4.5.7

ownCloud ownCloud=4.5.8

ownCloud ownCloud=4.5.9

ownCloud ownCloud=4.5.10

ownCloud ownCloud Server=5.0.0

ownCloud ownCloud Server=5.0.1

ownCloud ownCloud Server=5.0.2

ownCloud ownCloud Server=5.0.3

ownCloud ownCloud Server=5.0.4

ownCloud ownCloud Server=5.0.5

ownCloud ownCloud Server=5.0.6

ownCloud ownCloud Server=3.0.0

ownCloud ownCloud Server=3.0.1

ownCloud ownCloud Server=3.0.2

ownCloud ownCloud Server=3.0.3

ownCloud ownCloud Server=4.0.0

ownCloud ownCloud Server=4.0.1

ownCloud ownCloud Server=4.0.2

ownCloud ownCloud Server=4.0.3

ownCloud ownCloud Server=4.0.4

ownCloud ownCloud Server=4.0.5

ownCloud ownCloud Server=4.0.6

ownCloud ownCloud Server=4.0.7

ownCloud ownCloud Server=4.0.8

ownCloud ownCloud Server=4.0.9

ownCloud ownCloud Server=4.0.10

ownCloud ownCloud Server=4.0.11

ownCloud ownCloud Server=4.0.12

ownCloud ownCloud Server=4.0.13

ownCloud ownCloud Server=4.0.14

ownCloud ownCloud Server=4.0.15

ownCloud ownCloud Server=4.0.16

ownCloud ownCloud Server=4.5.0

ownCloud ownCloud Server=4.5.1

ownCloud ownCloud Server=4.5.2

ownCloud ownCloud Server=4.5.3

ownCloud ownCloud Server=4.5.4

ownCloud ownCloud Server=4.5.5

ownCloud ownCloud Server=4.5.6

ownCloud ownCloud Server=4.5.7

ownCloud ownCloud Server=4.5.8

ownCloud ownCloud Server=4.5.9

ownCloud ownCloud Server=4.5.10

Remediation

Patch Available

http://owncloud.org/about/security/advisories/oC-SA-2013-028/

Event History

Mar 14, 2014

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Data Sourced

via NVD·04:55 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-2150?

The severity of CVE-2013-2150 is classified as medium, primarily due to the potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2013-2150?