Description

ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address book or (2) rename files via unspecified vectors.

Remediation

References

CVE-2014-3834

Related Vulnerabilities

WordPress 4.6.x Arbitrary File Deletion Vulnerability (4.6 - 4.6.11)

WordPress Plugin Popular Posts by BestWebSoft Cross-Site Scripting (1.0.4)

Moodle Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-5545)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-2091)

WordPress Plugin Wordfence Security-Firewall & Malware Scan Unspecified Vulnerability (5.3.2)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2014-3834