CVE-2013-2042
Estado: ModificadaBaja (3.5)—
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bookmarks/ajax/editBookmark.php.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
- Puntuación base: 3.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.15%
- Percentil entre todas las CVEs puntuadas: 66
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-2042",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2014-03-14T16:55:05.380",
"references": [
{
"url": "http://owncloud.org/about/security/advisories/oC-SA-2013-021/",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "secalert@redhat.com"
},
{
"url": "http://owncloud.org/about/security/advisories/oC-SA-2013-021/",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bookmarks/ajax/editBookmark.php."
},
{
"lang": "es",
"value": "Múltiples vulnerabilidades de XSS en ownCloud anterior a 4.0.15, 4.5.x anterior a 4.5.11 y 5.0.x anterior a 5.0.6 permiten a usuarios remotos autenticados inyectar script Web o HTML arbitrarios a través del parámetro url hacia (1) apps/bookmarks/ajax/addBookmark.php o (2) apps/bookmarks/ajax/editBookmark.php."
}
],
"lastModified": "2026-06-16T23:52:38.423",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "141A8FE4-BFA1-4135-A3C9-9B038C08EA2B",
"versionEndIncluding": "4.0.14"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D77D4260-0D48-47EE-A09B-FC200CB36A38"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78FEEBC0-9483-4EBE-B6E4-5390144A36F5"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DED1F21-0941-4E3C-BA04-15D1C3B685C4"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A7951FE-9C41-4CCF-933F-56204147148B"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F36384F-ECB2-48F5-AB32-85AB643CD816"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DA03000-6D01-4CDA-8C83-C2AFC649B869"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8206EE35-2939-44B4-BBCF-C384C6206122"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7E07400-C700-454C-B5EF-4992F2089BE1"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D068E80A-1504-4814-88BF-7A183F5A7CD5"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3ACF1A42-0F83-4771-B097-CF497439C4D6"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF99DF50-3984-4F56-B2C8-4FA387627490"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "577514EE-9CA3-49E5-AE8A-9776F3BD40CA"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46AE5738-C00D-4B38-81E0-42BF1E71887A"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED841F08-2438-454E-BBAE-44CD847A9B82"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8577131-CCE2-4B98-8763-8F99E267BD5B"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79A6F6FF-7E31-4337-93E0-ED05D3D698D4"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C21E9F9A-5734-4819-8845-E82ADC29ABD2"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D57EBB84-E1B2-44F4-BD7B-8D4A79A2E2D3"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E90708D-CA85-4034-ADA7-72522812CEF6"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.5.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA2C4F18-4056-4ED3-B1E7-C945849FE97C"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.5.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE1FA818-0C13-4F41-9AF8-F31B035491F4"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.5.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F48864EB-2863-4C12-8F3B-DC90C29F6719"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.5.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CACD6812-4C89-46C9-B483-96829102157F"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:4.5.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4959B6D-08B3-4A88-A30D-AE2431085D3B"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D89BE316-CE49-49CB-85FB-B93C86E07276"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD902884-4F28-4AF6-A8D7-A6CD15048B0C"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B18395A6-B385-4ADB-9278-5F59FF339F1F"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94834DA8-247E-4A53-A95A-708AF7F9AC4E"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35203A98-76CE-4475-9C4A-60E6A1990B8A"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B1C940B-E6FE-41D5-8313-E6498331E9F5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert@redhat.com"
}