Due to not verifying whether an user has been granted access to an address book, authenticated users are able to access arbitrary contacts of other users.
For more information please consult the official advisory.
This advisory is licensed CC BY-SA 4.0
CPE | Name | Operator | Version |
---|---|---|---|
owncloud server | lt | 6.0.3 |