PT-2014-2534 · Owncloud · Owncloud

Publicado 2014-03-14 · Atualizado 2014-03-17 · CVE-2013-2041

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ownCloud versions 5.0.0 through 5.0.5

Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via the tag parameter to "apps/bookmarks/ajax/addBookmark.php" or the dir parameter to "apps/files/ajax/newfile.php", which is then passed to apps/files/js/files.js.

Recommendations For ownCloud versions 5.0.0 through 5.0.5, update to version 5.0.6 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-2041

Produtos afetados

Owncloud

Referências · 7

• https://osv.dev/vulnerability/UBUNTU-CVE-2013-2041 · Aviso do Fabricante
• http://owncloud.org/about/security/advisories/oC-SA-2013-021 · Aviso do Fabricante
• http://owncloud.org/about/security/advisories/oC-SA-2013-022 · Nota
• https://ubuntu.com/security/CVE-2013-2041 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-2041 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2013-2041 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2041 · Nota