CVE-2014-2050 Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to hijack the authentication of users for requests that reset passwords....
MediumCVSS 6.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to hijack the authentication of users for requests that reset passwords via a crafted HTTP Host header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| owncloud | < 5.0.15 | 5.0.15 |
| owncloud server | >= 6.0.0, < 6.0.2 | 6.0.2 |
References
- exchange.xforce.ibmcloud.com third-party-advisory vdb-entry
- owncloud.org not-applicable
- www.securityfocus.com third-party-advisory vdb-entry