| Package | Affected versions | Patched versions |
|---|---|---|
| owncloud server | = 6.0.0= 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 7.0.0= 7.0.1= 7.0.2 |
The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to obtain all valid session IDs via an unspecified API method.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free