CVE-2013-0307 — Cross-site Scripting in Owncloud

CWE-79 — Cross-site Scripting4 documents4 sources

Severity

3.5LOWNVD

EPSS

0.3%

top 48.19%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Owncloud Owncloud Server

Timeline

PublishedMar 14

Latest updateMay 5

Description

Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via the group input field parameter.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages2 packages

▶NVDowncloud/owncloud4.0.11

▶NVDowncloud/owncloud_server22 versions+21

🔴Vulnerability Details

GHSA

GHSA-j782-86c7-94m7: Cross-site scripting (XSS) vulnerability in settings↗2022-05-05

▶

CVEList

CVE-2013-0307: Cross-site scripting (XSS) vulnerability in settings↗2014-03-14

▶

💥Exploits & PoCs

Exploit-DB

Microsoft Internet Explorer - TextRange Use-After-Free (MS14-012) (Metasploit)↗2014-03-22

▶