Cross site request forgery (csrf)

2012-04-2010:55:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.7%

JSON

Cross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via vectors involving contacts.

CPENameOperatorVersion
owncloudeq3.0.0
owncloudle3.0.2
owncloudeq3.0.1

Name	Operator	Version
owncloud	eq	3.0.0
owncloud	le	3.0.2
owncloud	eq	3.0.1

References

owncloud.org/security/advisories/CVE-2012-2397/

secunia.com/advisories/48850

www.openwall.com/lists/oss-security/2012/08/11/1

www.openwall.com/lists/oss-security/2012/09/02/2

exchange.xforce.ibmcloud.com/vulnerabilities/75030