CVE-2013-2042 - Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bookmarks/ajax/editBookmark.php

Back Back to CVE browser

LOW

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bookmarks/ajax/editBookmark.php

Published Mar 14, 2014

3.5

LOW

CVSS 2.0

EPSS 1.15%

Description

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bookmarks/ajax/editBookmark.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://owncloud.org/about/security/advisories/oC-SA-2013-021/
x_refsource_CONFIRMPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2024
Advisory

Link	Providers	Tags
http://owncloud.org/about/security/advisories/oC-SA-2013-021/		x_refsource_CONFIRMPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2024		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner redhat

Published Mar 14, 2014

Updated Aug 6, 2024

Reserved Feb 19, 2013

Link CVE-2013-2042

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-2042

Red Hat

No data

ENISA EUVD

Assigner redhat

Published Mar 14, 2014

Updated Aug 6, 2024

Link EUVD-2013-2024

GitHub

No data