What’s Vulnerable › Vulnerabilities

CVE-2013-2150

• Severity: low (CVSS 3.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-03-14 · updated 2026-06-16
• Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and 5.x before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to shared files.

Affected products

• Owncloud: through 4.5.11
• ownCloud: 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5 (+33)

References

• http://owncloud.org/about/security/advisories/oC-SA-2013-028/
• http://owncloud.org/about/security/advisories/oC-SA-2013-028/

Get alerted when CVE-2013-2150 or the next vulnerability affects your stack