CVE-2020-28644

Опубликовано: 09 фев. 2021

Источник: debian

Описание

The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
owncloud	removed			package

Связанные уязвимости

CVE-2020-28644

CVSS3: 4.3

ubuntu

почти 5 лет назад

The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.

CVE-2020-28644

CVSS3: 4.3

nvd

почти 5 лет назад

The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.

GHSA-p5wf-rj4w-hc7f

github

больше 3 лет назад

The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.