Описание
The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| owncloud | fixed | 7.0.3+dfsg-1 | package |
Примечания
https://owncloud.org/security/advisory/?id=oc-sa-2014-019
EPSS
Связанные уязвимости
The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.
The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.
ALT-PU-2015-2867: package `owncloud` update to version 7.0.4-alt1
ALT-PU-2014-3208: package `owncloud` update to version 6.0.1-alt1
EPSS