Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-0307
HistoryMar 14, 2014 - 12:00 a.m.

CVE-2013-0307

2014-03-1400:00:00
ubuntu.com
ubuntu.com
14

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.001

Percentile

23.6%

Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before
4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject
arbitrary web script or HTML via the group input field parameter.

Bugs

Notes

Author Note
mdeslaur owncloud packages in Ubuntu are now empty

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.001

Percentile

23.6%

Related for UB:CVE-2013-0307