GHSA-p5wf-rj4w-hc7f

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.

Ссылки

EPSS

Процентиль: 35%

0.00146

Низкий

CVE ID

CVE-2020-28644

Дефекты

CWE-352

Связанные уязвимости

CVE-2020-28644

CVSS3: 4.3

ubuntu

почти 5 лет назад

The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.

CVE-2020-28644

CVSS3: 4.3

nvd

почти 5 лет назад

The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.

CVE-2020-28644

CVSS3: 4.3

debian

почти 5 лет назад

The CSRF (Cross Site Request Forgery) token check was improperly imple ...

EPSS

Процентиль: 35%

0.00146

Низкий

CVE ID

CVE-2020-28644

Дефекты

CWE-352