CVE-2013-2048 | BDVDB-2026-60366 Detail

Description#

ownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated users to execute arbitrary API commands via unspecified vectors. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary API commands.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://owncloud.org/about/security/advisories/oC-SA-2013-025/

Exploit#

No public exploit known

History#

Version 12014-03-14Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.