| Package | Affected versions | Patched versions |
|---|---|---|
| owncloud | ≤ 4.0.6 | |
| owncloud server | = 3.0.0= 3.0.1= 3.0.2= 3.0.3= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5 |
Cross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows remote attackers to hijack the authentication of administrators for requests that edit the app configurations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free