6.8
CVSSv2

CVE-2014-3836

Published: 04/06/2014 Updated: 05/06/2014
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server prior to 6.0.3 allow remote malicious users to hijack the authentication of users for requests that (1) conduct cross-site scripting (XSS) attacks, (2) modify files, or (3) rename files via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

owncloud owncloud

owncloud owncloud 6.0.1

owncloud owncloud 6.0.0