CVE-2013-1963 in ownCloud

Summary

The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via unspecified vectors.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 02/19/2013
• Disclosure: 03/14/2014
• Moderation: VulDB entry created
• Entries: VDB-66651 (1)
• CPE: ready
• CWE: CWE-264 (Confirmed)
• CVSS: 4.3
• EPSS: 0.00176
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-1963
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-1963
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-1963/