NVD

Id
38157  
Name
CVE-2013-2042  
Description
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bookmarks/ajax/editBookmark.php.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-03-14  
Modified Date
2014-03-17  
Seq
2013-2042  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195090 38157 CVE-2013-2042 http://owncloud.org/about/security/advisories/oC-SA-2013-021/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24643 JVNDB-2013-006218 ownCloud におけるクロスサイトスクリプティングの脆弱性 ownCloud には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-2042 61984 CVE-2013-2042 38157 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006218.html 2013-04-30 2014-03-19 View