Unscored CVE-2012-2397 EUVD-2012-2384GHSA-gg9w-26m5-gwq9

Cross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers to hijack the authentication of arbitrary …

Published Apr 20, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via vectors involving contacts.

References

[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa mailing-list
[oss-security] 20120901 Re: CVE - ownCloud mailing-list
48850 third-party-advisory
owncloud-unspecified-csrf(75030) vdb-entry
http://owncloud.org/security/advisories/CVE-2012-2397/