CVE-2014-2050

CVE-2014-2050 affects ownCloud Server versions prior to 5.0.15 and 6.0.x prior to 6.0.2. The vulnerability is a Cross-Site Request Forgery (CSRF) that lets remote attackers hijack a user’s authentication for password-reset requests via a crafted HTTP Host header. Affected component is the web app...