Description

Cross-site request forgery (CSRF) vulnerability in apps/calendar/ajax/settings/settimezone in ownCloud before 4.0.12 allows remote attackers to hijack the authentication of users for requests that change the timezone via the timezone parameter.

Remediation

References

CVE-2013-0301

Related Vulnerabilities

WordPress Ultimate Member Plugin CVE-2019-10271 Vulnerability (CVE-2019-10271)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29039)

Jenkins Improper Authentication Vulnerability (CVE-2018-1999045)

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-7061)

Oracle JRE CVE-2020-2816 Vulnerability (CVE-2020-2816)

Severity

Medium

Classification

CVE-2013-0301 CWE-352

Tags

Missing Update Known Vulnerabilities