Description

Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow remote attackers to hijack the authentication of users for requests that (1) conduct cross-site scripting (XSS) attacks, (2) modify files, or (3) rename files via unspecified vectors.

Remediation

References

CVE-2014-3836

Related Vulnerabilities

WordPress Plugin Easy Contact Form Lite 'sort_row.request.php' SQL Injection (1.0.7)

Python Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2022-0391)

WordPress Plugin Forms-Form builder and Contact form Multiple Unspecified Vulnerabilities (1.4.7)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4550)

WordPress Plugin s2member Secure File Browser Cross-Site Scripting (0.4.16)

Severity

Medium

Classification

CVE-2014-3836 CWE-352

Tags

Missing Update Known Vulnerabilities