| Package | Affected versions | Patched versions |
|---|---|---|
| owncloud | ≤ 5.0.5 | |
| owncloud server | = 5.0.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4 |
ownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated users to execute arbitrary API commands via unspecified vectors. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary API commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free