Description

The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the API.

Remediation

References

CVE-2014-9048

Related Vulnerabilities

WordPress Plugin Wufoo Shortcode Cross-Site Scripting (1.51)

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-6830)

WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Request Forgery Vulnerabilities (3.4.7)

WordPress Plugin Essential Addons for Elementor Server-Side Request Forgery (2.9.8)

Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33334)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2014-9048