Description
ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Learn Manager Cross-Site Scripting (1.1.2)
Apache HTTP Server Other Vulnerability (CVE-2003-0020)
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-0300)
PHP Numeric Errors Vulnerability (CVE-2016-1904)
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-9546)