CVEvulnerability
CVE-2013-1963
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via unspecified vectors.
Affected configurations
• owncloud owncloud (<= 4.5.9)
• owncloud owncloud server 4.5.0
• owncloud owncloud server 4.5.1
• owncloud owncloud server 4.5.2
• owncloud owncloud server 4.5.3
• owncloud owncloud server 4.5.4
• owncloud owncloud server 4.5.5
• owncloud owncloud server 4.5.6
• owncloud owncloud server 4.5.7
• owncloud owncloud server 4.5.8
• owncloud owncloud server 5.0.0
• owncloud owncloud server 5.0.1
• owncloud owncloud server 5.0.2
• owncloud owncloud server 5.0.3
• owncloud owncloud server 5.0.4
Related
Weakness · not in database (1)
References
- http://owncloud.org/about/security/advisories/oC-SA-2013-018/ Vendor Advisory
- http://owncloud.org/about/security/advisories/oC-SA-2013-018/ Vendor Advisory