CVE-2014-3836
Published: 4 June 2014
Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow remote attackers to hijack the authentication of users for requests that (1) conduct cross-site scripting (XSS) attacks, (2) modify files, or (3) rename files via unspecified vectors.
Notes
Author | Note |
---|---|
mdeslaur | owncloud packages in Ubuntu are now empty |
Priority
Status
Package | Release | Status |
---|---|---|
owncloud Launchpad, Ubuntu, Debian |
upstream |
Released
(6.0.3)
|
lucid |
Does not exist
|
|
precise |
Not vulnerable
|
|
saucy |
Not vulnerable
(5.0.12+dfsg-1ubuntu1~saucy1)
|
|
trusty |
Does not exist
(trusty was not-affected)
|
|
utopic |
Does not exist
|
|
vivid |
Does not exist
|
|
wily |
Does not exist
|
|
xenial |
Does not exist
|