CVE-2012-4391 in ownCloudinfo

Summary

Cross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

IDVulnerabilityCWEExpCouCVE
62038ownCloud cross-site request forgery352Not definedOfficial fixCVE-2012-4391

Reservation

08/21/2012

Disclosure

09/05/2012

Status

Confirmed

Entries

1

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2012-4391
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2012-4391
CVE Detailshttps://www.cvedetails.com/cve/CVE-2012-4391/

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!