Description

The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via unspecified vectors.

Remediation

References

CVE-2013-1963

Related Vulnerabilities

phpMyFAQ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-29196)

Squid Other Vulnerability (CVE-2010-0639)

WordPress Plugin Advanced Custom Fields (ACF) Arbitrary File Upload (5.12.2)

Claroline Other Vulnerability (CVE-2006-1594)

WordPress Plugin Payment Gateways Caller for WP e-Commerce Local File Inclusion (0.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2013-1963