Description
Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow remote attackers to hijack the authentication of users for requests that (1) conduct cross-site scripting (XSS) attacks, (2) modify files, or (3) rename files via unspecified vectors.
Remediation
References
Related Vulnerabilities
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3481)
WordPress Plugin AddToAny Share Buttons Host Header Injection (1.7.14)
Oracle Database Server CVE-2014-6544 Vulnerability (CVE-2014-6544)
Drupal Core 6.x Multiple Cross-Site Scripting Vulnerabilities (6.0)