Description
ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to apps/calendar/export.php.
Remediation
References
Related Vulnerabilities
MySQL CVE-2019-2805 Vulnerability (CVE-2019-2805)
PHP Improper Input Validation Vulnerability (CVE-2015-4148)
Java Unspesificed Vulnerability (CVE-2018-2941)
Dolibarr Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-38887)
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17305)