Unscored CVE-2013-2048 EUVD-2013-2030GHSA-wq9j-6h98-5f7j

ownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated users to execute arbitrary API commands via un…

Published Mar 14, 2014 · Updated Aug 6, 2024 · Assigned by redhat

Description

ownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated users to execute arbitrary API commands via unspecified vectors. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary API commands.

References

http://owncloud.org/about/security/advisories/oC-SA-2013-025/