CVE-2013-7344: Medium severity ownCloud ownCloud vulnerability
Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ownCloud core/settings.phpto a version that resolves this vulnerability.Fixed in 4.0.12 - Upgrade
Upgrade
ownCloud core/settings.phpto a version that resolves this vulnerability.Fixed in 4.5.6
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7344?
CVE-2013-7344 has been classified as a high severity vulnerability due to its potential to allow remote authenticated users to execute arbitrary PHP code.
How do I fix CVE-2013-7344?
To remediate CVE-2013-7344, upgrade your ownCloud installation to version 4.0.12 or 4.5.6 or later.
Which versions of ownCloud are affected by CVE-2013-7344?
CVE-2013-7344 affects ownCloud versions before 4.0.12 and 4.5.x before 4.5.6.
What can happen if CVE-2013-7344 is exploited?
If exploited, CVE-2013-7344 could allow an attacker to execute arbitrary PHP code on the server, potentially compromising the entire application.
Is CVE-2013-7344 related to any other vulnerabilities?
Yes, CVE-2013-7344 was split from CVE-2013-0303 due to different affected versions.