Unscored CVE-2012-5336 EUVD-2012-5259GHSA-7vw2-cghq-q23f

lib/base.php in ownCloud before 4.0.8 does not properly validate the user_id session variable, which allows remote authenticated users to r…

Published Jun 4, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

lib/base.php in ownCloud before 4.0.8 does not properly validate the user_id session variable, which allows remote authenticated users to read arbitrary files via vectors related to WebDAV.

References

http://owncloud.org/about/security/advisories/CVE-2012-5336/