Skip to content
OpenAdvisories

Product · Kiteworks

OwnCloud

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2023-7273

    Cross Site Request Forgery in Kiteworks OwnCloud

    Cross site request forgery in Kiteworks OwnCloud allows an unauthenticated attacker to forge requests. If a request has no Authorization header, it is created with an empty string as value by a rewrite rule. The CSRF check is done by comparing the header valu…

    Kiteworks OwnCloud