Description

lib/base.php in ownCloud before 4.0.8 does not properly validate the user_id session variable, which allows remote authenticated users to read arbitrary files via vectors related to WebDAV.

Remediation

References

CVE-2012-5336

Related Vulnerabilities

Joomla! Core Denial of Service (2.5.0 - 3.9.27)

MediaWiki CVE-2023-37305 Vulnerability (CVE-2023-37305)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-16335)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-14239)

WordPress Plugin Sliding Social Icons Cross-Site Request Forgery (1.61)

Severity

Medium

Classification

CVE-2012-5336 CWE-20

Tags

Missing Update Known Vulnerabilities