Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2qf9-7qgg-cxxh

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.

The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.

EPSS

Процентиль: 58%
0.00828
Низкий

Дефекты

CWE-352

Связанные уязвимости

nvd
почти 12 лет назад

The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.

debian
почти 12 лет назад

The import functionality in the bookmarks application in ownCloud serv ...

altlinux
почти 12 лет назад

ALT-PU-2015-2867: package `owncloud` update to version 7.0.4-alt1

CVSS3: 9.8
altlinux
больше 12 лет назад

ALT-PU-2014-3208: package `owncloud` update to version 6.0.1-alt1

EPSS

Процентиль: 58%
0.00828
Низкий

Дефекты

CWE-352