The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file.
References
Link | Resource |
---|---|
http://owncloud.org/about/security/advisories/oC-SA-2013-027/ | Patch Vendor Advisory |
http://owncloud.org/about/security/advisories/oC-SA-2013-027/ | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:51
Type | Values Removed | Values Added |
---|---|---|
References | () http://owncloud.org/about/security/advisories/oC-SA-2013-027/ - Patch, Vendor Advisory |
Information
Published : 2014-03-14 16:55
Updated : 2024-11-21 01:51
NVD link : CVE-2013-2086
Mitre link : CVE-2013-2086
CVE.ORG link : CVE-2013-2086
JSON object : View
Products Affected
owncloud
- owncloud
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor