CVE-2012-4391

No fix known EPSS 1%

Cross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations.

Published 2012-09-05 · CVE record · OSV

Products: owncloud, owncloud_server