Description

Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow remote attackers to hijack the authentication of users for requests that (1) conduct cross-site scripting (XSS) attacks, (2) modify files, or (3) rename files via unspecified vectors.

Remediation

References

CVE-2014-3836

Related Vulnerabilities

WordPress Plugin Qode Instagram Widget (embeded in Bridge-Creative Multi-Purpose WordPress Theme) Open Redirect (2.0.1)

WordPress Plugin Connections Business Directory Cross-Site Scripting (10.4.2)

Apache HTTP Server Other Vulnerability (CVE-2003-0134)

WordPress Plugin Google Maps v3 Shortcode Cross-Site Scripting (1.2.1)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1000407)

Severity

Medium

Classification

CVE-2014-3836 CWE-352

Tags

Missing Update Known Vulnerabilities