Cross site request forgery (csrf)

2012-09-0523:55:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.6%

JSON

Cross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations.

CPENameOperatorVersion
owncloudeq4.0.3
owncloudeq4.0.0
owncloudeq3.0.3
owncloudle4.0.6
owncloudeq4.0.1
owncloudeq4.0.5
owncloudeq4.0.2
owncloudeq3.0.0
owncloudeq3.0.2
owncloudeq4.0.4

Name	Operator	Version
owncloud	eq	4.0.3
owncloud	eq	4.0.0
owncloud	eq	3.0.3
owncloud	le	4.0.6
owncloud	eq	4.0.1
owncloud	eq	4.0.5
owncloud	eq	4.0.2
owncloud	eq	3.0.0
owncloud	eq	3.0.2
owncloud	eq	4.0.4