Lucene search
OwnCloudOC-SA-2013-007HistoryFeb 20, 2013 - 10:42 a.m.
Server: Privilege escalation in the calendar application
2013-02-2010:42:22
owncloud.org
20
0.001 Low
EPSS
Percentile
36.7%
Due to not properly checking the ownership of an calendar, an authenticated attacker is able to download calendars of other users via the “calid” GET parameter to export.php in /apps/calendar/
For more information please consult the official advisory.
This advisory is licensed CC BY-SA 4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud server | lt | 4.5.7 |
Related
openvas
openvas
ownCloud 'calid' Parameter privilege Escalation Vulnerability
2014-07-03 00:00:00
ubuntucve
ubuntucve
CVE-2013-0304
2014-06-05 00:00:00
cve
cve
CVE-2013-0304
2014-06-05 15:44:07
cvelist
cvelist
CVE-2013-0304
2014-06-05 15:00:00
owncloud
owncloud
Privilege escalation in the calendar application - ownCloud
2013-02-20 17:36:47
nvd
nvd
CVE-2013-0304
2014-06-05 15:44:07
prion
prion
Cross site request forgery (csrf)
2014-06-05 15:44:00