Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) new_name parameter to apps/bookmarks/ajax/renameTag.php or (2) multiple unspecified parameters to unknown files in apps/contacts/ajax/.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Owncloud | Owncloud | <= 5.0.0 |
Related Weaknesses (CWE)
References
- http://owncloud.org/about/security/advisories/oC-SA-2013-011Vendor Advisory
- http://www.securityfocus.com/bid/58852
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83245
- http://owncloud.org/about/security/advisories/oC-SA-2013-011Vendor Advisory
- http://www.securityfocus.com/bid/58852
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83245
FAQ
What is CVE-2013-1890?
CVE-2013-1890 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) new_name parameter to apps/bookmarks/ajax/...
How severe is CVE-2013-1890?
CVE-2013-1890 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-1890?
Check the references section above for vendor advisories and patch information. Affected products include: Owncloud Owncloud.