MGASA-2013-0171

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2013-0171.html
Import Source
https://advisories.mageia.org/MGASA-2013-0171.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2013-0171
Upstream
  • CVE-2013-2149
  • CVE-2013-2150
Published
2013-06-18T14:58:38Z
Modified
2026-04-16T04:41:31Z
Summary
Updated owncloud package fixes security vulnerabilities
Details

Cross-site scripting (XSS) vulnerabilities in js/viewer.js inside the files_videoviewer application via multiple unspecified vectors in all ownCloud versions prior to 5.0.7 and 4.5.12 allows authenticated remote attackers to inject arbitrary web script or HTML via shared files (CVE-2013-2150).

Cross-site scripting (XSS) vulnerabilities in core/js/oc-dialogs.js via multiple unspecified vectors in all ownCloud versions prior to 5.0.7 and other versions before 4.0.16 allows authenticated remote attackers to inject arbitrary web script or HTML via shared files (CVE-2013-2149).

References
Credits

Affected packages

Mageia:3 / owncloud

Package

Name
owncloud
Purl
pkg:rpm/mageia/owncloud?arch=source&distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.0.7-1.mga3

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2013-0171.json"