PT-2021-11570

Name of the Vulnerable Software and Affected Versions: ownCloud/core versions prior to 10.6 Description: The issue is related to an improper implementation of the CSRF token check on cookie authenticated requests against some ocs API endpoints. Recommendations: For ownCloud/core versions prior to...

CVE-2020-28644: Cross-Site Request Forgery (CSRF)

The CSRF Cross Site Request Forgery token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version 10.6...