Description

The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via unspecified vectors.

Remediation

References

CVE-2013-1963

Related Vulnerabilities

WordPress Plugin Catch Infinite Scroll Security Bypass (1.8.1)

Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-2750)

Oracle JRE CVE-2013-2414 Vulnerability (CVE-2013-2414)

WordPress Plugin MW WP Form Cross-Site Scripting (5.0.6)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1757)

Severity

Medium

Classification

CVE-2013-1963 CWE-264

Tags

Missing Update Known Vulnerabilities