CVE-2012-4391

N/A

Beschreibung

Cross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht9/5/2012

Zuletzt geandert4/11/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

owncloud:owncloudowncloud:owncloud_server

Schwachen (CWE)

CWE-352

Referenzen

http://owncloud.org/changelog/(secalert@redhat.com)

http://www.openwall.com/lists/oss-security/2012/09/02/2(secalert@redhat.com)

https://github.com/owncloud/core/commit/5192eecce239a0b7ade1e60a6cf03075e5cfc188(secalert@redhat.com)

http://owncloud.org/changelog/(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2012/09/02/2(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/owncloud/core/commit/5192eecce239a0b7ade1e60a6cf03075e5cfc188(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.