Description

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file.

Remediation

References

CVE-2013-2086

Related Vulnerabilities

WordPress Plugin Import Spreadsheets from Microsoft Excel Arbitrary File Upload (10.1.4)

Oracle Database Server CVE-2015-2599 Vulnerability (CVE-2015-2599)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2017-5660)

Oracle JRE CVE-2013-1557 Vulnerability (CVE-2013-1557)

WordPress Plugin One Click Upsell Funnel for WooCommerce Unspecified Vulnerability (2.0.0)

Severity

Medium

Classification

CVE-2013-2086 CWE-200

Tags

Missing Update Known Vulnerabilities