Description

The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.

Remediation

References

CVE-2013-2047

Related Vulnerabilities

PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-14668)

XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-36095)

Drupal Core 9.2.x Cross-Site Scripting (9.2.0 - 9.2.3)

e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2750)

WordPress Plugin Booster for WooCommerce Multiple Vulnerabilities (5.6.6)

Severity

Low

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2013-2047