CVE-2013-2086: ownCloud Server

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file.

Affected products

• ownCloud ownCloud Server: version 5.0.0 only; version 5.0.1 only; version 5.0.2 only; version 5.0.3 only; version 5.0.4 only; version 5.0.5 only

Published 2014-03-14. Last modified 2026-06-16.