CSRF in Owncloud
CVE-2014-9041
The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.008 (53.8th percentile) — read the EPSS interpretation.
Affected products
- Owncloud
- Owncloud Owncloud_server — versions 5.0.0, 5.0.1, 5.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)