CVE-2013-0202: ownCloud Server

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php.

Affected products

• ownCloud ownCloud Server: from 4.0.0, before 4.0.11 (fixed in 4.0.11); from 4.5.0, before 4.5.6 (fixed in 4.5.6)

Published 2019-12-17. Last modified 2026-06-16.