CVE-2013-2048

No fix known EPSS 2%

ownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated users to execute arbitrary API commands via unspecified vectors. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary API commands.

Published 2014-03-14 · CVE record · OSV

Products: owncloud, owncloud_server