Description

The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.

Remediation

References

CVE-2014-9041

Related Vulnerabilities

phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-1151)

MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-13070)

Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-1563)

Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-69149)

WordPress Plugin HDInvoice-Create Invoices Arbitrary File Upload (0.1)

Severity

Medium

Classification

CVE-2014-9041 CWE-352

Tags

Missing Update Known Vulnerabilities