| Package | Affected versions | Patched versions |
|---|---|---|
| owncloud server | = 7.0.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.0.7= 8.0.0= 8.0.2= 8.0.3= 8.0.4= 8.0.5= 8.1.0 |
ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to apps/calendar/export.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free