Lucene search
owncloud.orgOWNCLOUD:BE42C9D4123DBB3F386D269BF27D632CHistoryJul 10, 2012 - 5:16 p.m.
CSRF in appconfig.php - ownCloud
2012-07-1017:16:52
owncloud.org
38
0.001 Low
EPSS
Percentile
47.6%
Cross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations.
Affected Software
- ownCloud Server < 4.0.7 (CVE-2012-4391)
Action Taken
It is recommended that all instances are upgraded to ownCloud Server 4.0.7.
Acknowledgements
The ownCloud team thanks the following people for their research and responsible disclosure of the above advisory:
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud server | lt | 4.0.7 |
Related
owncloud
owncloud
Server: CSRF in appconfig.php
2012-07-10 11:42:22
prion
prion
Cross site request forgery (csrf)
2012-09-05 23:55:00
nvd
nvd
CVE-2012-4391
2012-09-05 23:55:02
cve
cve
CVE-2012-4391
2022-10-03 16:15:33
ubuntucve
ubuntucve
CVE-2012-4391
2012-09-05 00:00:00
cvelist
cvelist
CVE-2012-4391
2022-10-03 16:15:33
openvas
openvas