ownCloud: owncloud.com: Account Compromise Through CSRF

@architaa, @vishnudfx, @konkakarthik and @hussain reported a CSRF vulnerability on the owncloud.com web page that may lead to an account take over. This issue has been mitigated meanwhile. To protect private information such as the reporters' email address this issue has been disclosed limitedly...

ownCloud: s2.owncloud.com: SSL Session cookie without secure flag set

URL: https://s2.owncloud.com/ Issue detail The following cookie was issued by the application and does not have the secure flag set: sessionid=0fdc40cc016d1e70b1567b0071e5dcd2; expires=Sat Aug 22 03:45:12 2015; path=/; domain=s2.owncloud.com; max-age=86387; httponly The cookie appears to contain ...

ownCloud: owncloud.com: DOM Based XSS

Hello, there's DOM Based XSS In Main Page https://owncloud.com/"// Thanks...