ownCloud prior to 5.0.6 does not properly check permissions, which allows remote authenticated users to execute arbitrary API commands via unspecified vectors. NOTE: this can be leveraged using CSRF to allow remote malicious users to execute arbitrary API commands.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
owncloud owncloud 5.0.3 |
||
owncloud owncloud |
||
owncloud owncloud 5.0.0 |
||
owncloud owncloud 5.0.1 |
||
owncloud owncloud 5.0.2 |
||
owncloud owncloud 5.0.4 |