Description

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file.

Remediation

References

CVE-2013-2086

Related Vulnerabilities

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11029)

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0413)

WordPress Plugin Easy Justified Gallery Cross-Site Scripting (1.0.8)

WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Multiple Cross-Site Scripting Vulnerabilities (2.3.9)

WordPress Plugin WP Symposium Open Redirect (13.12)

Severity

Medium

Classification

CVE-2013-2086 CWE-200

Tags

Missing Update Known Vulnerabilities